[{"_id":{"$oid":"6a5c9d3fb3bed57e0e7378d0"},"sha256":"c9b4047be7c4b7190533db32c67b85fe51c1692cca1d36944ad2f4d554b9320a","analysis_info":{"id":189,"version":"2.5","category":"file","package":"exe","started":"2026-07-19 09:33:09","ended":"2026-07-19 09:43:16","duration":607,"machine":{"id":158,"status":"stopping","name":"windows-10-sandbox-01","label":"windows-10-sandbox-01","platform":"windows","manager":"Proxmox","started_on":"2026-07-19 09:33:09","shutdown_on":"2026-07-19 09:38:30"},"route":"tor"},"events":[{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtTestAlert","category":"threading","status":true,"return_value":null,"repeated":0,"arguments":[],"timestamp":"2026-07-19 16:33:25,871","timestamp_epoch":"2026-07-19 16:33:25,871","call_order":1,"extraction_index":3,"global_index":0},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtWaitForSingleObject","category":"system","status":true,"return_value":null,"repeated":3,"arguments":[{"name":"Handle","value":"0x0000007c"},{"name":"Milliseconds","value":"18446744073709551615"},{"name":"Status","value":"Infinite"}],"timestamp":"2026-07-19 16:33:25,871","timestamp_epoch":"2026-07-19 16:33:25,871","call_order":2,"extraction_index":4,"global_index":1},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtTestAlert","category":"threading","status":true,"return_value":null,"repeated":0,"arguments":[],"timestamp":"2026-07-19 16:33:25,871","timestamp_epoch":"2026-07-19 16:33:25,871","call_order":3,"extraction_index":5,"global_index":2},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"RtlUserThreadStart","category":"threading","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"StartAddress","value":"0x00000000"},{"name":"Parameter","value":"0x00000000"}],"timestamp":"2026-07-19 16:33:25,871","timestamp_epoch":"2026-07-19 16:33:25,871","call_order":4,"extraction_index":6,"global_index":3},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtAllocateVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x00df0000"},{"name":"RegionSize","value":"0x00001000"},{"name":"Protection","value":"0x00000004","pretty_value":"PAGE_READWRITE"},{"name":"StackPivoted","value":"no"}],"timestamp":"2026-07-19 16:33:25,871","timestamp_epoch":"2026-07-19 16:33:25,871","call_order":5,"extraction_index":7,"global_index":4},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtTestAlert","category":"threading","status":true,"return_value":null,"repeated":0,"arguments":[],"timestamp":"2026-07-19 16:33:25,871","timestamp_epoch":"2026-07-19 16:33:25,871","call_order":6,"extraction_index":8,"global_index":5},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"RtlUserThreadStart","category":"threading","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"StartAddress","value":"0x00000000"},{"name":"Parameter","value":"0x00000000"}],"timestamp":"2026-07-19 16:33:25,871","timestamp_epoch":"2026-07-19 16:33:25,871","call_order":7,"extraction_index":9,"global_index":6},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtTestAlert","category":"threading","status":true,"return_value":null,"repeated":0,"arguments":[],"timestamp":"2026-07-19 16:33:25,871","timestamp_epoch":"2026-07-19 16:33:25,871","call_order":8,"extraction_index":10,"global_index":7},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"RtlUserThreadStart","category":"threading","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"StartAddress","value":"0x00000000"},{"name":"Parameter","value":"0x00000000"}],"timestamp":"2026-07-19 16:33:25,871","timestamp_epoch":"2026-07-19 16:33:25,871","call_order":9,"extraction_index":11,"global_index":8},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtAllocateVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x00df1000"},{"name":"RegionSize","value":"0x00001000"},{"name":"Protection","value":"0x00000004","pretty_value":"PAGE_READWRITE"},{"name":"StackPivoted","value":"no"}],"timestamp":"2026-07-19 16:33:25,871","timestamp_epoch":"2026-07-19 16:33:25,871","call_order":10,"extraction_index":12,"global_index":9},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtTestAlert","category":"threading","status":true,"return_value":null,"repeated":0,"arguments":[],"timestamp":"2026-07-19 16:33:25,871","timestamp_epoch":"2026-07-19 16:33:25,871","call_order":11,"extraction_index":13,"global_index":10},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"RtlUserThreadStart","category":"threading","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"StartAddress","value":"0x00000000"},{"name":"Parameter","value":"0x00000000"}],"timestamp":"2026-07-19 16:33:25,871","timestamp_epoch":"2026-07-19 16:33:25,871","call_order":12,"extraction_index":14,"global_index":11},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetDllHandle","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"FileName","value":"kernel32.dll"},{"name":"ModuleHandle","value":"0x77750000"}],"timestamp":"2026-07-19 16:33:25,934","timestamp_epoch":"2026-07-19 16:33:25,934","call_order":13,"extraction_index":15,"global_index":12},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrLoadDll","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Flags","value":"0x00000000"},{"name":"FileName","value":"user32.dll"},{"name":"BaseAddress","value":"0x75cc0000"}],"timestamp":"2026-07-19 16:33:25,934","timestamp_epoch":"2026-07-19 16:33:25,934","call_order":14,"extraction_index":16,"global_index":13},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrLoadDll","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Flags","value":"0x00000000"},{"name":"FileName","value":"advapi32.dll"},{"name":"BaseAddress","value":"0x763b0000"}],"timestamp":"2026-07-19 16:33:25,934","timestamp_epoch":"2026-07-19 16:33:25,934","call_order":15,"extraction_index":17,"global_index":14},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrLoadDll","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Flags","value":"0x00000000"},{"name":"FileName","value":"ntdll.dll"},{"name":"BaseAddress","value":"0x77930000"}],"timestamp":"2026-07-19 16:33:25,934","timestamp_epoch":"2026-07-19 16:33:25,934","call_order":16,"extraction_index":18,"global_index":15},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrLoadDll","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Flags","value":"0x00000000"},{"name":"FileName","value":"shell32.dll"},{"name":"BaseAddress","value":"0x76ee0000"}],"timestamp":"2026-07-19 16:33:25,934","timestamp_epoch":"2026-07-19 16:33:25,934","call_order":17,"extraction_index":19,"global_index":16},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrLoadDll","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Flags","value":"0x00000000"},{"name":"FileName","value":"shlwapi.dll"},{"name":"BaseAddress","value":"0x76850000"}],"timestamp":"2026-07-19 16:33:25,934","timestamp_epoch":"2026-07-19 16:33:25,934","call_order":18,"extraction_index":20,"global_index":17},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"KERNEL32.DLL"},{"name":"ModuleHandle","value":"0x77750000"},{"name":"FunctionName","value":"SetLastError"},{"name":"Ordinal","value":"0"},{"name":"FunctionAddress","value":"0x7776e240"}],"timestamp":"2026-07-19 16:33:25,949","timestamp_epoch":"2026-07-19 16:33:25,949","call_order":19,"extraction_index":21,"global_index":18},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"KERNEL32.DLL"},{"name":"ModuleHandle","value":"0x77750000"},{"name":"FunctionName","value":"GetLastError"},{"name":"Ordinal","value":"0"},{"name":"FunctionAddress","value":"0x7776e2b0"}],"timestamp":"2026-07-19 16:33:25,949","timestamp_epoch":"2026-07-19 16:33:25,949","call_order":20,"extraction_index":22,"global_index":19},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"KERNEL32.DLL"},{"name":"ModuleHandle","value":"0x77750000"},{"name":"FunctionName","value":"IsWow64Process2"},{"name":"Ordinal","value":"0"},{"name":"FunctionAddress","value":"0x75ffd680"}],"timestamp":"2026-07-19 16:33:25,949","timestamp_epoch":"2026-07-19 16:33:25,949","call_order":21,"extraction_index":23,"global_index":20},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtOpenThread","category":"threading","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ThreadHandle","value":"0x00000258"},{"name":"DesiredAccess","value":"0x001f03ff","pretty_value":"THREAD_ALL_ACCESS"},{"name":"ProcessId","value":"7964"},{"name":"ThreadId","value":"18446744073698804735"}],"timestamp":"2026-07-19 16:33:25,949","timestamp_epoch":"2026-07-19 16:33:25,949","call_order":22,"extraction_index":24,"global_index":21},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtAllocateVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x00df2000"},{"name":"RegionSize","value":"0x00002000"},{"name":"Protection","value":"0x00000004","pretty_value":"PAGE_READWRITE"},{"name":"StackPivoted","value":"no"}],"timestamp":"2026-07-19 16:33:25,949","timestamp_epoch":"2026-07-19 16:33:25,949","call_order":23,"extraction_index":25,"global_index":22},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtOpenProcessToken","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"DesiredAccess","value":"0x00000008"},{"name":"TokenHandle","value":"0x00000254"}],"timestamp":"2026-07-19 16:33:25,949","timestamp_epoch":"2026-07-19 16:33:25,949","call_order":24,"extraction_index":26,"global_index":23},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtQueryInformationToken","category":"process","status":false,"return_value":null,"repeated":0,"arguments":[{"name":"TokenInformationClass","value":"2"},{"name":"TokenInformation","value":""}],"timestamp":"2026-07-19 16:33:25,949","timestamp_epoch":"2026-07-19 16:33:25,949","call_order":25,"extraction_index":27,"global_index":24},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtAllocateVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x007f0000"},{"name":"RegionSize","value":"0x00001000"},{"name":"Protection","value":"0x00000004","pretty_value":"PAGE_READWRITE"},{"name":"StackPivoted","value":"no"}],"timestamp":"2026-07-19 16:33:25,949","timestamp_epoch":"2026-07-19 16:33:25,949","call_order":26,"extraction_index":28,"global_index":25},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtQueryInformationToken","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"TokenInformationClass","value":"2"},{"name":"TokenInformation","value":"\\x0e\\x00\\x00\\x00t\\x00\\x7f\\x00\\x07\\x00\\x00\\x00\\x90\\x00\\x7f\\x00\\x07\\x00\\x00\\x00\\x9c\\x00\\x7f\\x00\\x07\\x00\\x00\\x00\\xa8\\x00\\x7f\\x00\\x0f\\x00\\x00\\x00\\xb8\\x00\\x7f\\x00\\x07\\x00\\x00\\x00\\xc8\\x00\\x7f\\x00\\x07\\x00\\x00\\x00\\xd4\\x00\\x7f\\x00\\x07\\x00\\x00\\x00\\xe0\\x00\\x7f\\x00\\x07\\x00\\x00\\x00\\xec\\x00\\x7f\\x00\\x07\\x00\\x00\\x00\\xf8\\x00\\x7f\\x00\\x07\\x00\\x00\\x00\\x04\\x01\\x7f\\x00\\x07\\x00\\x00\\xc0\\x18\\x01\\x7f\\x00\\x07\\x00\\x00\\x00$\\x01\\x7f\\x00\\x07\\x00\\x00\\x004\\x01\\x7f\\x00`\\x00\\x00\\x00\\x01\\x05\\x00\\x00\\x00\\x00\\x00\\x05\\x15\\x00\\x00\\x00\\xb5D\rP\\x83C\\xc4\\xa1\\xae\\x1d\\xae\\x82\\x01\\x02\\x00\\x00\\x01\\x01\\x00\\x00\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x01\\x01\\x00\\x00\\x00\\x00\\x00\\x05r\\x00\\x00\\x00\\x01\\x02\\x00\\x00\\x00\\x00\\x00\\x05 \\x00\\x00\\x00 \\x02\\x00\\x00\\x01\\x02\\x00\\x00\\x00\\x00\\x00\\x05 \\x00\\x00\\x00!\\x02\\x00\\x00\\x01\\x01\\x00\\x00\\x00\\x00\\x00\\x05\\x04\\x00\\x00\\x00\\x01\\x01\\x00\\x00\\x00\\x00\\x00\\x02\\x01\\x00\\x00\\x00\\x01\\x01\\x00\\x00\\x00\\x00\\x00\\x05\\x0b\\x00\\x00\\x00\\x01\\x01\\x00\\x00\\x00\\x00\\x00\\x05\\x0f\\x00\\x00\\x00\\x01\\x01\\x00\\x00\\x00\\x00\\x00\\x05"}],"timestamp":"2026-07-19 16:33:25,949","timestamp_epoch":"2026-07-19 16:33:25,949","call_order":27,"extraction_index":29,"global_index":26},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtClose","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Handle","value":"0x00000254"}],"timestamp":"2026-07-19 16:33:25,949","timestamp_epoch":"2026-07-19 16:33:25,949","call_order":28,"extraction_index":30,"global_index":27},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtFreeVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x007f0000"},{"name":"RegionSize","value":"0x00001000"},{"name":"FreeType","value":"0x00008000"}],"timestamp":"2026-07-19 16:33:25,949","timestamp_epoch":"2026-07-19 16:33:25,949","call_order":29,"extraction_index":31,"global_index":28},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"SHELL32.dll"},{"name":"ModuleHandle","value":"0x76ee0000"},{"name":"FunctionName","value":"IsUserAnAdmin"},{"name":"Ordinal","value":"0"},{"name":"FunctionAddress","value":"0x771aec90"}],"timestamp":"2026-07-19 16:33:25,949","timestamp_epoch":"2026-07-19 16:33:25,949","call_order":30,"extraction_index":32,"global_index":29},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtClose","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Handle","value":"0x00000254"}],"timestamp":"2026-07-19 16:33:25,949","timestamp_epoch":"2026-07-19 16:33:25,949","call_order":31,"extraction_index":33,"global_index":30},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtClose","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Handle","value":"0x00000250"}],"timestamp":"2026-07-19 16:33:25,949","timestamp_epoch":"2026-07-19 16:33:25,949","call_order":32,"extraction_index":34,"global_index":31},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"RtlSetCurrentTransaction","category":"misc","status":true,"return_value":null,"repeated":1,"arguments":[{"name":"TransactionHandle","value":"0x00000000"}],"timestamp":"2026-07-19 16:33:25,949","timestamp_epoch":"2026-07-19 16:33:25,949","call_order":33,"extraction_index":35,"global_index":32},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtOpenKeyEx","category":"registry","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"KeyHandle","value":"0x00000250"},{"name":"DesiredAccess","value":"0x02000000","pretty_value":"MAXIMUM_ALLOWED"},{"name":"ObjectAttributesHandle","value":"0x0000012c"},{"name":"ObjectAttributesName","value":"Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System"},{"name":"ObjectAttributes","value":"HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System"}],"timestamp":"2026-07-19 16:33:25,949","timestamp_epoch":"2026-07-19 16:33:25,949","call_order":34,"extraction_index":36,"global_index":33},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"RegQueryValueExA","category":"registry","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Handle","value":"0x00000250"},{"name":"ValueName","value":"EnableLUA"},{"name":"Data","value":"1"},{"name":"FullName","value":"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\EnableLUA"}],"timestamp":"2026-07-19 16:33:25,949","timestamp_epoch":"2026-07-19 16:33:25,949","call_order":35,"extraction_index":37,"global_index":34},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"RegCloseKey","category":"registry","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Handle","value":"0x00000250"}],"timestamp":"2026-07-19 16:33:25,949","timestamp_epoch":"2026-07-19 16:33:25,949","call_order":36,"extraction_index":38,"global_index":35},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"RtlSetCurrentTransaction","category":"misc","status":true,"return_value":null,"repeated":1,"arguments":[{"name":"TransactionHandle","value":"0x00000000"}],"timestamp":"2026-07-19 16:33:25,949","timestamp_epoch":"2026-07-19 16:33:25,949","call_order":37,"extraction_index":39,"global_index":36},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtOpenKeyEx","category":"registry","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"KeyHandle","value":"0x00000250"},{"name":"DesiredAccess","value":"0x02000000","pretty_value":"MAXIMUM_ALLOWED"},{"name":"ObjectAttributesHandle","value":"0x0000012c"},{"name":"ObjectAttributesName","value":"SYSTEM\\CurrentControlSet\\Control"},{"name":"ObjectAttributes","value":"HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Control"}],"timestamp":"2026-07-19 16:33:25,949","timestamp_epoch":"2026-07-19 16:33:25,949","call_order":38,"extraction_index":40,"global_index":37},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"RegQueryValueExA","category":"registry","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Handle","value":"0x00000250"},{"name":"ValueName","value":"SystemStartOptions"},{"name":"Data","value":" NOEXECUTE=OPTIN"},{"name":"FullName","value":"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\SystemStartOptions"}],"timestamp":"2026-07-19 16:33:25,949","timestamp_epoch":"2026-07-19 16:33:25,949","call_order":39,"extraction_index":41,"global_index":38},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"RegCloseKey","category":"registry","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Handle","value":"0x00000250"}],"timestamp":"2026-07-19 16:33:25,949","timestamp_epoch":"2026-07-19 16:33:25,949","call_order":40,"extraction_index":42,"global_index":39},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"RtlSetCurrentTransaction","category":"misc","status":true,"return_value":null,"repeated":1,"arguments":[{"name":"TransactionHandle","value":"0x00000000"}],"timestamp":"2026-07-19 16:33:25,949","timestamp_epoch":"2026-07-19 16:33:25,949","call_order":41,"extraction_index":43,"global_index":40},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtOpenKeyEx","category":"registry","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"KeyHandle","value":"0x00000250"},{"name":"DesiredAccess","value":"0x02000000","pretty_value":"MAXIMUM_ALLOWED"},{"name":"ObjectAttributesHandle","value":"0x0000012c"},{"name":"ObjectAttributesName","value":"SYSTEM\\ControlSet001\\Control\\Class\\{4D36E968-E325-11CE-BFC1-08002BE10318}\\0000"},{"name":"ObjectAttributes","value":"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Class\\{4D36E968-E325-11CE-BFC1-08002BE10318}\\0000"}],"timestamp":"2026-07-19 16:33:25,949","timestamp_epoch":"2026-07-19 16:33:25,949","call_order":42,"extraction_index":44,"global_index":41},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"RegQueryValueExA","category":"registry","status":false,"return_value":null,"repeated":0,"arguments":[{"name":"Handle","value":"0x00000250"},{"name":"ValueName","value":"DriverDesc"},{"name":"Type","value":"0x00000001","pretty_value":"REG_SZ"},{"name":"DataLength","value":"32"},{"name":"FullName","value":"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Class\\{4d36e968-e325-11ce-bfc1-08002be10318}\\0000\\DriverDesc"}],"timestamp":"2026-07-19 16:33:25,949","timestamp_epoch":"2026-07-19 16:33:25,949","call_order":43,"extraction_index":45,"global_index":42},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"RegCloseKey","category":"registry","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Handle","value":"0x00000250"}],"timestamp":"2026-07-19 16:33:25,949","timestamp_epoch":"2026-07-19 16:33:25,949","call_order":44,"extraction_index":46,"global_index":43},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"RtlSetCurrentTransaction","category":"misc","status":true,"return_value":null,"repeated":1,"arguments":[{"name":"TransactionHandle","value":"0x00000000"}],"timestamp":"2026-07-19 16:33:25,949","timestamp_epoch":"2026-07-19 16:33:25,949","call_order":45,"extraction_index":47,"global_index":44},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtOpenKeyEx","category":"registry","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"KeyHandle","value":"0x00000250"},{"name":"DesiredAccess","value":"0x02000000","pretty_value":"MAXIMUM_ALLOWED"},{"name":"ObjectAttributesHandle","value":"0x0000012c"},{"name":"ObjectAttributesName","value":"Hardware\\description\\System"},{"name":"ObjectAttributes","value":"HKEY_LOCAL_MACHINE\\Hardware\\description\\System"}],"timestamp":"2026-07-19 16:33:25,949","timestamp_epoch":"2026-07-19 16:33:25,949","call_order":46,"extraction_index":48,"global_index":45},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"RegQueryValueExA","category":"registry","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Handle","value":"0x00000250"},{"name":"ValueName","value":"SystemBiosVersion"},{"name":"Data","value":"\\x00"},{"name":"FullName","value":"HKEY_LOCAL_MACHINE\\HARDWARE\\DESCRIPTION\\System\\SystemBiosVersion"}],"timestamp":"2026-07-19 16:33:25,949","timestamp_epoch":"2026-07-19 16:33:25,949","call_order":47,"extraction_index":49,"global_index":46},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"RegQueryValueExA","category":"registry","status":false,"return_value":null,"repeated":0,"arguments":[{"name":"Handle","value":"0x00000250"},{"name":"ValueName","value":"VideoBiosVersion"},{"name":"FullName","value":"HKEY_LOCAL_MACHINE\\HARDWARE\\DESCRIPTION\\System\\VideoBiosVersion"}],"timestamp":"2026-07-19 16:33:25,949","timestamp_epoch":"2026-07-19 16:33:25,949","call_order":48,"extraction_index":50,"global_index":47},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"RegQueryValueExA","category":"registry","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Handle","value":"0x00000250"},{"name":"ValueName","value":"SystemBiosVersion"},{"name":"Data","value":"\\x00"},{"name":"FullName","value":"HKEY_LOCAL_MACHINE\\HARDWARE\\DESCRIPTION\\System\\SystemBiosVersion"}],"timestamp":"2026-07-19 16:33:25,949","timestamp_epoch":"2026-07-19 16:33:25,949","call_order":49,"extraction_index":51,"global_index":48},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"RegCloseKey","category":"registry","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Handle","value":"0x00000250"}],"timestamp":"2026-07-19 16:33:25,949","timestamp_epoch":"2026-07-19 16:33:25,949","call_order":50,"extraction_index":52,"global_index":49},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"RtlSetCurrentTransaction","category":"misc","status":true,"return_value":null,"repeated":1,"arguments":[{"name":"TransactionHandle","value":"0x00000000"}],"timestamp":"2026-07-19 16:33:25,949","timestamp_epoch":"2026-07-19 16:33:25,949","call_order":51,"extraction_index":53,"global_index":50},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtOpenKeyEx","category":"registry","status":false,"return_value":null,"repeated":0,"arguments":[{"name":"KeyHandle","value":"0x00000000"},{"name":"DesiredAccess","value":"0x02000000","pretty_value":"MAXIMUM_ALLOWED"},{"name":"ObjectAttributesHandle","value":"0x0000012c"},{"name":"ObjectAttributesName","value":"HARDWARE\\ACPI\\DSDT\\VBOX__"},{"name":"ObjectAttributes","value":"HKEY_LOCAL_MACHINE\\HARDWARE\\ACPI\\DSDT\\VBOX__"}],"timestamp":"2026-07-19 16:33:25,949","timestamp_epoch":"2026-07-19 16:33:25,949","call_order":52,"extraction_index":54,"global_index":51},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtQuerySystemInformation","category":"misc","status":false,"return_value":null,"repeated":0,"arguments":[{"name":"SystemInformationClass","value":"76"}],"timestamp":"2026-07-19 16:33:25,949","timestamp_epoch":"2026-07-19 16:33:25,949","call_order":53,"extraction_index":55,"global_index":52},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtQuerySystemInformation","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"SystemInformationClass","value":"76"}],"timestamp":"2026-07-19 16:33:25,949","timestamp_epoch":"2026-07-19 16:33:25,949","call_order":54,"extraction_index":56,"global_index":53},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtAllocateVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x05070000"},{"name":"RegionSize","value":"0x0015c000"},{"name":"Protection","value":"0x00000004","pretty_value":"PAGE_READWRITE"},{"name":"StackPivoted","value":"no"}],"timestamp":"2026-07-19 16:33:25,949","timestamp_epoch":"2026-07-19 16:33:25,949","call_order":55,"extraction_index":57,"global_index":54},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtProtectVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x00081000"},{"name":"ModuleName","value":"rp-019f79b8d2487453a.exe"},{"name":"NumberOfBytesProtected","value":"0x0015c000"},{"name":"MemoryType","value":"0x00000000"},{"name":"NewAccessProtection","value":"0x00000004","pretty_value":"PAGE_READWRITE"},{"name":"OldAccessProtection","value":"0x00000020","pretty_value":"PAGE_EXECUTE_READ"},{"name":"StackPivoted","value":"no"}],"timestamp":"2026-07-19 16:33:25,949","timestamp_epoch":"2026-07-19 16:33:25,949","call_order":56,"extraction_index":58,"global_index":55},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtAllocateVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x007f0000"},{"name":"RegionSize","value":"0x00004000"},{"name":"Protection","value":"0x00000004","pretty_value":"PAGE_READWRITE"},{"name":"StackPivoted","value":"no"}],"timestamp":"2026-07-19 16:33:25,949","timestamp_epoch":"2026-07-19 16:33:25,949","call_order":57,"extraction_index":59,"global_index":56},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtFreeVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x007f0000"},{"name":"RegionSize","value":"0x00004000"},{"name":"FreeType","value":"0x00008000"}],"timestamp":"2026-07-19 16:33:25,981","timestamp_epoch":"2026-07-19 16:33:25,981","call_order":58,"extraction_index":60,"global_index":57},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtProtectVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x00081000"},{"name":"ModuleName","value":"rp-019f79b8d2487453a.exe"},{"name":"NumberOfBytesProtected","value":"0x0015c000"},{"name":"MemoryType","value":"0x00000000"},{"name":"NewAccessProtection","value":"0x00000020","pretty_value":"PAGE_EXECUTE_READ"},{"name":"OldAccessProtection","value":"0x00000004","pretty_value":"PAGE_READWRITE"},{"name":"StackPivoted","value":"no"}],"timestamp":"2026-07-19 16:33:26,168","timestamp_epoch":"2026-07-19 16:33:26,168","call_order":59,"extraction_index":61,"global_index":58},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtFreeVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x05070000"},{"name":"RegionSize","value":"0x0015c000"},{"name":"FreeType","value":"0x00008000"}],"timestamp":"2026-07-19 16:33:26,168","timestamp_epoch":"2026-07-19 16:33:26,168","call_order":60,"extraction_index":62,"global_index":59},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtAllocateVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x02930000"},{"name":"RegionSize","value":"0x00028000"},{"name":"Protection","value":"0x00000004","pretty_value":"PAGE_READWRITE"},{"name":"StackPivoted","value":"no"}],"timestamp":"2026-07-19 16:33:26,168","timestamp_epoch":"2026-07-19 16:33:26,168","call_order":61,"extraction_index":63,"global_index":60},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtProtectVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x001dd000"},{"name":"ModuleName","value":"rp-019f79b8d2487453a.exe"},{"name":"NumberOfBytesProtected","value":"0x00028000"},{"name":"MemoryType","value":"0x00000000"},{"name":"NewAccessProtection","value":"0x00000004","pretty_value":"PAGE_READWRITE"},{"name":"OldAccessProtection","value":"0x00000002","pretty_value":"PAGE_READONLY"},{"name":"StackPivoted","value":"no"}],"timestamp":"2026-07-19 16:33:26,168","timestamp_epoch":"2026-07-19 16:33:26,168","call_order":62,"extraction_index":64,"global_index":61},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtAllocateVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x007f0000"},{"name":"RegionSize","value":"0x00004000"},{"name":"Protection","value":"0x00000004","pretty_value":"PAGE_READWRITE"},{"name":"StackPivoted","value":"no"}],"timestamp":"2026-07-19 16:33:26,168","timestamp_epoch":"2026-07-19 16:33:26,168","call_order":63,"extraction_index":65,"global_index":62},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtFreeVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x007f0000"},{"name":"RegionSize","value":"0x00004000"},{"name":"FreeType","value":"0x00008000"}],"timestamp":"2026-07-19 16:33:26,184","timestamp_epoch":"2026-07-19 16:33:26,184","call_order":64,"extraction_index":66,"global_index":63},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtProtectVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x001dd000"},{"name":"ModuleName","value":"rp-019f79b8d2487453a.exe"},{"name":"NumberOfBytesProtected","value":"0x00028000"},{"name":"MemoryType","value":"0x00000000"},{"name":"NewAccessProtection","value":"0x00000002","pretty_value":"PAGE_READONLY"},{"name":"OldAccessProtection","value":"0x00000004","pretty_value":"PAGE_READWRITE"},{"name":"StackPivoted","value":"no"}],"timestamp":"2026-07-19 16:33:26,184","timestamp_epoch":"2026-07-19 16:33:26,184","call_order":65,"extraction_index":67,"global_index":64},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtFreeVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x02930000"},{"name":"RegionSize","value":"0x00028000"},{"name":"FreeType","value":"0x00008000"}],"timestamp":"2026-07-19 16:33:26,184","timestamp_epoch":"2026-07-19 16:33:26,184","call_order":66,"extraction_index":68,"global_index":65},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtAllocateVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x007f0000"},{"name":"RegionSize","value":"0x00004000"},{"name":"Protection","value":"0x00000004","pretty_value":"PAGE_READWRITE"},{"name":"StackPivoted","value":"no"}],"timestamp":"2026-07-19 16:33:26,184","timestamp_epoch":"2026-07-19 16:33:26,184","call_order":67,"extraction_index":69,"global_index":66},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtProtectVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x00205000"},{"name":"ModuleName","value":"rp-019f79b8d2487453a.exe"},{"name":"NumberOfBytesProtected","value":"0x00004000"},{"name":"MemoryType","value":"0x00000000"},{"name":"NewAccessProtection","value":"0x00000004","pretty_value":"PAGE_READWRITE"},{"name":"OldAccessProtection","value":"0x00000008","pretty_value":"PAGE_WRITECOPY"},{"name":"StackPivoted","value":"no"}],"timestamp":"2026-07-19 16:33:26,184","timestamp_epoch":"2026-07-19 16:33:26,184","call_order":68,"extraction_index":70,"global_index":67},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtAllocateVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x00db0000"},{"name":"RegionSize","value":"0x00004000"},{"name":"Protection","value":"0x00000004","pretty_value":"PAGE_READWRITE"},{"name":"StackPivoted","value":"no"}],"timestamp":"2026-07-19 16:33:26,184","timestamp_epoch":"2026-07-19 16:33:26,184","call_order":69,"extraction_index":71,"global_index":68},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtFreeVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x00db0000"},{"name":"RegionSize","value":"0x00004000"},{"name":"FreeType","value":"0x00008000"}],"timestamp":"2026-07-19 16:33:26,184","timestamp_epoch":"2026-07-19 16:33:26,184","call_order":70,"extraction_index":72,"global_index":69},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtProtectVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x00205000"},{"name":"ModuleName","value":"rp-019f79b8d2487453a.exe"},{"name":"NumberOfBytesProtected","value":"0x00004000"},{"name":"MemoryType","value":"0x00000000"},{"name":"NewAccessProtection","value":"0x00000008","pretty_value":"PAGE_WRITECOPY"},{"name":"OldAccessProtection","value":"0x00000004","pretty_value":"PAGE_READWRITE"},{"name":"StackPivoted","value":"no"}],"timestamp":"2026-07-19 16:33:26,184","timestamp_epoch":"2026-07-19 16:33:26,184","call_order":71,"extraction_index":73,"global_index":70},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtFreeVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x007f0000"},{"name":"RegionSize","value":"0x00004000"},{"name":"FreeType","value":"0x00008000"}],"timestamp":"2026-07-19 16:33:26,184","timestamp_epoch":"2026-07-19 16:33:26,184","call_order":72,"extraction_index":74,"global_index":71},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtAllocateVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x007f0000"},{"name":"RegionSize","value":"0x0000d000"},{"name":"Protection","value":"0x00000004","pretty_value":"PAGE_READWRITE"},{"name":"StackPivoted","value":"no"}],"timestamp":"2026-07-19 16:33:26,184","timestamp_epoch":"2026-07-19 16:33:26,184","call_order":73,"extraction_index":75,"global_index":72},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtProtectVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x0020a000"},{"name":"ModuleName","value":"rp-019f79b8d2487453a.exe"},{"name":"NumberOfBytesProtected","value":"0x0000d000"},{"name":"MemoryType","value":"0x00000000"},{"name":"NewAccessProtection","value":"0x00000004","pretty_value":"PAGE_READWRITE"},{"name":"OldAccessProtection","value":"0x00000002","pretty_value":"PAGE_READONLY"},{"name":"StackPivoted","value":"no"}],"timestamp":"2026-07-19 16:33:26,184","timestamp_epoch":"2026-07-19 16:33:26,184","call_order":74,"extraction_index":76,"global_index":73},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtAllocateVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x00db0000"},{"name":"RegionSize","value":"0x00004000"},{"name":"Protection","value":"0x00000004","pretty_value":"PAGE_READWRITE"},{"name":"StackPivoted","value":"no"}],"timestamp":"2026-07-19 16:33:26,184","timestamp_epoch":"2026-07-19 16:33:26,184","call_order":75,"extraction_index":77,"global_index":74},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtFreeVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x00db0000"},{"name":"RegionSize","value":"0x00004000"},{"name":"FreeType","value":"0x00008000"}],"timestamp":"2026-07-19 16:33:26,184","timestamp_epoch":"2026-07-19 16:33:26,184","call_order":76,"extraction_index":78,"global_index":75},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtProtectVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x0020a000"},{"name":"ModuleName","value":"rp-019f79b8d2487453a.exe"},{"name":"NumberOfBytesProtected","value":"0x0000d000"},{"name":"MemoryType","value":"0x00000000"},{"name":"NewAccessProtection","value":"0x00000002","pretty_value":"PAGE_READONLY"},{"name":"OldAccessProtection","value":"0x00000004","pretty_value":"PAGE_READWRITE"},{"name":"StackPivoted","value":"no"}],"timestamp":"2026-07-19 16:33:26,184","timestamp_epoch":"2026-07-19 16:33:26,184","call_order":77,"extraction_index":79,"global_index":76},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtFreeVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x007f0000"},{"name":"RegionSize","value":"0x0000d000"},{"name":"FreeType","value":"0x00008000"}],"timestamp":"2026-07-19 16:33:26,184","timestamp_epoch":"2026-07-19 16:33:26,184","call_order":78,"extraction_index":80,"global_index":77},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtAllocateVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x007f0000"},{"name":"RegionSize","value":"0x0000a000"},{"name":"Protection","value":"0x00000004","pretty_value":"PAGE_READWRITE"},{"name":"StackPivoted","value":"no"}],"timestamp":"2026-07-19 16:33:26,184","timestamp_epoch":"2026-07-19 16:33:26,184","call_order":79,"extraction_index":81,"global_index":78},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtProtectVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x00217000"},{"name":"ModuleName","value":"rp-019f79b8d2487453a.exe"},{"name":"NumberOfBytesProtected","value":"0x0000a000"},{"name":"MemoryType","value":"0x00000000"},{"name":"NewAccessProtection","value":"0x00000004","pretty_value":"PAGE_READWRITE"},{"name":"OldAccessProtection","value":"0x00000002","pretty_value":"PAGE_READONLY"},{"name":"StackPivoted","value":"no"}],"timestamp":"2026-07-19 16:33:26,184","timestamp_epoch":"2026-07-19 16:33:26,184","call_order":80,"extraction_index":82,"global_index":79},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtAllocateVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x00db0000"},{"name":"RegionSize","value":"0x00004000"},{"name":"Protection","value":"0x00000004","pretty_value":"PAGE_READWRITE"},{"name":"StackPivoted","value":"no"}],"timestamp":"2026-07-19 16:33:26,184","timestamp_epoch":"2026-07-19 16:33:26,184","call_order":81,"extraction_index":83,"global_index":80},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtFreeVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x00db0000"},{"name":"RegionSize","value":"0x00004000"},{"name":"FreeType","value":"0x00008000"}],"timestamp":"2026-07-19 16:33:26,184","timestamp_epoch":"2026-07-19 16:33:26,184","call_order":82,"extraction_index":84,"global_index":81},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtProtectVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x00217000"},{"name":"ModuleName","value":"rp-019f79b8d2487453a.exe"},{"name":"NumberOfBytesProtected","value":"0x0000a000"},{"name":"MemoryType","value":"0x00000000"},{"name":"NewAccessProtection","value":"0x00000002","pretty_value":"PAGE_READONLY"},{"name":"OldAccessProtection","value":"0x00000004","pretty_value":"PAGE_READWRITE"},{"name":"StackPivoted","value":"no"}],"timestamp":"2026-07-19 16:33:26,184","timestamp_epoch":"2026-07-19 16:33:26,184","call_order":83,"extraction_index":85,"global_index":82},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtFreeVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x007f0000"},{"name":"RegionSize","value":"0x0000a000"},{"name":"FreeType","value":"0x00008000"}],"timestamp":"2026-07-19 16:33:26,184","timestamp_epoch":"2026-07-19 16:33:26,184","call_order":84,"extraction_index":86,"global_index":83},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtProtectVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x00203000"},{"name":"ModuleName","value":"rp-019f79b8d2487453a.exe"},{"name":"NumberOfBytesProtected","value":"0x00001000"},{"name":"MemoryType","value":"0x00000000"},{"name":"NewAccessProtection","value":"0x00000040","pretty_value":"PAGE_EXECUTE_READWRITE"},{"name":"OldAccessProtection","value":"0x00000002","pretty_value":"PAGE_READONLY"},{"name":"StackPivoted","value":"no"}],"timestamp":"2026-07-19 16:33:26,215","timestamp_epoch":"2026-07-19 16:33:26,215","call_order":85,"extraction_index":87,"global_index":84},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtProtectVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x001dd000"},{"name":"ModuleName","value":"rp-019f79b8d2487453a.exe"},{"name":"NumberOfBytesProtected","value":"0x00001000"},{"name":"MemoryType","value":"0x00000000"},{"name":"NewAccessProtection","value":"0x00000040","pretty_value":"PAGE_EXECUTE_READWRITE"},{"name":"OldAccessProtection","value":"0x00000002","pretty_value":"PAGE_READONLY"},{"name":"StackPivoted","value":"no"}],"timestamp":"2026-07-19 16:33:26,262","timestamp_epoch":"2026-07-19 16:33:26,262","call_order":86,"extraction_index":88,"global_index":85},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtProtectVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x001dd000"},{"name":"ModuleName","value":"rp-019f79b8d2487453a.exe"},{"name":"NumberOfBytesProtected","value":"0x00001000"},{"name":"MemoryType","value":"0x01000000"},{"name":"NewAccessProtection","value":"0x00000040","pretty_value":"PAGE_EXECUTE_READWRITE"},{"name":"OldAccessProtection","value":"0x00000040","pretty_value":"PAGE_EXECUTE_READWRITE"},{"name":"StackPivoted","value":"no"}],"timestamp":"2026-07-19 16:33:26,293","timestamp_epoch":"2026-07-19 16:33:26,293","call_order":87,"extraction_index":89,"global_index":86},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetDllHandle","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"FileName","value":"ADVAPI32.DLL"},{"name":"ModuleHandle","value":"0x763b0000"}],"timestamp":"2026-07-19 16:33:26,293","timestamp_epoch":"2026-07-19 16:33:26,293","call_order":88,"extraction_index":90,"global_index":87},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetDllHandle","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"FileName","value":"GDIPLUS.DLL"},{"name":"ModuleHandle","value":"0x72360000"}],"timestamp":"2026-07-19 16:33:26,293","timestamp_epoch":"2026-07-19 16:33:26,293","call_order":89,"extraction_index":91,"global_index":88},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetDllHandle","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"FileName","value":"USER32.DLL"},{"name":"ModuleHandle","value":"0x75cc0000"}],"timestamp":"2026-07-19 16:33:26,293","timestamp_epoch":"2026-07-19 16:33:26,293","call_order":90,"extraction_index":92,"global_index":89},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetDllHandle","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"FileName","value":"SHLWAPI.DLL"},{"name":"ModuleHandle","value":"0x76850000"}],"timestamp":"2026-07-19 16:33:26,293","timestamp_epoch":"2026-07-19 16:33:26,293","call_order":91,"extraction_index":93,"global_index":90},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetDllHandle","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"FileName","value":"SHELL32.DLL"},{"name":"ModuleHandle","value":"0x76ee0000"}],"timestamp":"2026-07-19 16:33:26,293","timestamp_epoch":"2026-07-19 16:33:26,293","call_order":92,"extraction_index":94,"global_index":91},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetDllHandle","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"FileName","value":"KERNEL32.DLL"},{"name":"ModuleHandle","value":"0x77750000"}],"timestamp":"2026-07-19 16:33:26,293","timestamp_epoch":"2026-07-19 16:33:26,293","call_order":93,"extraction_index":95,"global_index":92},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetDllHandle","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"FileName","value":"GDI32.DLL"},{"name":"ModuleHandle","value":"0x75850000"}],"timestamp":"2026-07-19 16:33:26,293","timestamp_epoch":"2026-07-19 16:33:26,293","call_order":94,"extraction_index":96,"global_index":93},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetDllHandle","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"FileName","value":"CRYPT32.DLL"},{"name":"ModuleHandle","value":"0x76430000"}],"timestamp":"2026-07-19 16:33:26,293","timestamp_epoch":"2026-07-19 16:33:26,293","call_order":95,"extraction_index":97,"global_index":94},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetDllHandle","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"FileName","value":"SETUPAPI.DLL"},{"name":"ModuleHandle","value":"0x75880000"}],"timestamp":"2026-07-19 16:33:26,293","timestamp_epoch":"2026-07-19 16:33:26,293","call_order":96,"extraction_index":98,"global_index":95},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetDllHandle","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"FileName","value":"WS2_32.DLL"},{"name":"ModuleHandle","value":"0x76d00000"}],"timestamp":"2026-07-19 16:33:26,293","timestamp_epoch":"2026-07-19 16:33:26,293","call_order":97,"extraction_index":99,"global_index":96},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetDllHandle","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"FileName","value":"OLE32.DLL"},{"name":"ModuleHandle","value":"0x77660000"}],"timestamp":"2026-07-19 16:33:26,293","timestamp_epoch":"2026-07-19 16:33:26,293","call_order":98,"extraction_index":100,"global_index":97},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetDllHandle","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"FileName","value":"NTDLL.DLL"},{"name":"ModuleHandle","value":"0x77930000"}],"timestamp":"2026-07-19 16:33:26,293","timestamp_epoch":"2026-07-19 16:33:26,293","call_order":99,"extraction_index":101,"global_index":98},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetDllHandle","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"FileName","value":"RSTRTMGR.DLL"},{"name":"ModuleHandle","value":"0x6bf30000"}],"timestamp":"2026-07-19 16:33:26,293","timestamp_epoch":"2026-07-19 16:33:26,293","call_order":100,"extraction_index":102,"global_index":99},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtAllocateVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x02930000"},{"name":"RegionSize","value":"0x00014000"},{"name":"Protection","value":"0x00000004","pretty_value":"PAGE_READWRITE"},{"name":"StackPivoted","value":"no"}],"timestamp":"2026-07-19 16:33:26,293","timestamp_epoch":"2026-07-19 16:33:26,293","call_order":101,"extraction_index":103,"global_index":100},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetDllHandle","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"FileName","value":"api-ms-win-core-com-l1-1-0"},{"name":"ModuleHandle","value":"0x76130000"}],"timestamp":"2026-07-19 16:33:26,356","timestamp_epoch":"2026-07-19 16:33:26,356","call_order":102,"extraction_index":104,"global_index":101},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"combase.dll"},{"name":"ModuleHandle","value":"0x76130000"},{"name":"FunctionName","value":"CoCreateInstance"},{"name":"Ordinal","value":"0"},{"name":"FunctionAddress","value":"0x761ead00"}],"timestamp":"2026-07-19 16:33:26,356","timestamp_epoch":"2026-07-19 16:33:26,356","call_order":103,"extraction_index":105,"global_index":102},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"WS2_32.dll"},{"name":"ModuleHandle","value":"0x76d00000"},{"name":"FunctionName","value":""},{"name":"Ordinal","value":"16"},{"name":"FunctionAddress","value":"0x76d123a0"}],"timestamp":"2026-07-19 16:33:26,356","timestamp_epoch":"2026-07-19 16:33:26,356","call_order":104,"extraction_index":106,"global_index":103},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"ntdll.dll"},{"name":"ModuleHandle","value":"0x77930000"},{"name":"FunctionName","value":"RtlDecodePointer"},{"name":"Ordinal","value":"0"},{"name":"FunctionAddress","value":"0x779955a0"}],"timestamp":"2026-07-19 16:33:26,356","timestamp_epoch":"2026-07-19 16:33:26,356","call_order":105,"extraction_index":107,"global_index":104},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"ntdll.dll"},{"name":"ModuleHandle","value":"0x77930000"},{"name":"FunctionName","value":"RtlLeaveCriticalSection"},{"name":"Ordinal","value":"0"},{"name":"FunctionAddress","value":"0x7796e8c0"}],"timestamp":"2026-07-19 16:33:26,356","timestamp_epoch":"2026-07-19 16:33:26,356","call_order":106,"extraction_index":108,"global_index":105},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"ntdll.dll"},{"name":"ModuleHandle","value":"0x77930000"},{"name":"FunctionName","value":"RtlAcquireSRWLockExclusive"},{"name":"Ordinal","value":"0"},{"name":"FunctionAddress","value":"0x77972510"}],"timestamp":"2026-07-19 16:33:26,356","timestamp_epoch":"2026-07-19 16:33:26,356","call_order":107,"extraction_index":109,"global_index":106},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"KERNEL32.DLL"},{"name":"ModuleHandle","value":"0x77750000"},{"name":"FunctionName","value":"GetVersionExA"},{"name":"Ordinal","value":"0"},{"name":"FunctionAddress","value":"0x77771a00"}],"timestamp":"2026-07-19 16:33:26,356","timestamp_epoch":"2026-07-19 16:33:26,356","call_order":108,"extraction_index":110,"global_index":107},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"ntdll.dll"},{"name":"ModuleHandle","value":"0x77930000"},{"name":"FunctionName","value":"RtlReleaseSRWLockExclusive"},{"name":"Ordinal","value":"0"},{"name":"FunctionAddress","value":"0x779726b0"}],"timestamp":"2026-07-19 16:33:26,356","timestamp_epoch":"2026-07-19 16:33:26,356","call_order":109,"extraction_index":111,"global_index":108},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"WS2_32.dll"},{"name":"ModuleHandle","value":"0x76d00000"},{"name":"FunctionName","value":""},{"name":"Ordinal","value":"21"},{"name":"FunctionAddress","value":"0x76d0f070"}],"timestamp":"2026-07-19 16:33:26,356","timestamp_epoch":"2026-07-19 16:33:26,356","call_order":110,"extraction_index":112,"global_index":109},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"WS2_32.dll"},{"name":"ModuleHandle","value":"0x76d00000"},{"name":"FunctionName","value":""},{"name":"Ordinal","value":"22"},{"name":"FunctionAddress","value":"0x76d132b0"}],"timestamp":"2026-07-19 16:33:26,356","timestamp_epoch":"2026-07-19 16:33:26,356","call_order":111,"extraction_index":113,"global_index":110},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"ntdll.dll"},{"name":"ModuleHandle","value":"0x77930000"},{"name":"FunctionName","value":"RtlAllocateHeap"},{"name":"Ordinal","value":"0"},{"name":"FunctionAddress","value":"0x77976080"}],"timestamp":"2026-07-19 16:33:26,356","timestamp_epoch":"2026-07-19 16:33:26,356","call_order":112,"extraction_index":114,"global_index":111},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"WS2_32.dll"},{"name":"ModuleHandle","value":"0x76d00000"},{"name":"FunctionName","value":""},{"name":"Ordinal","value":"23"},{"name":"FunctionAddress","value":"0x76d0c990"}],"timestamp":"2026-07-19 16:33:26,356","timestamp_epoch":"2026-07-19 16:33:26,356","call_order":113,"extraction_index":115,"global_index":112},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"WS2_32.dll"},{"name":"ModuleHandle","value":"0x76d00000"},{"name":"FunctionName","value":""},{"name":"Ordinal","value":"115"},{"name":"FunctionAddress","value":"0x76d09cc0"}],"timestamp":"2026-07-19 16:33:26,356","timestamp_epoch":"2026-07-19 16:33:26,356","call_order":114,"extraction_index":116,"global_index":113},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"ntdll.dll"},{"name":"ModuleHandle","value":"0x77930000"},{"name":"FunctionName","value":"RtlEncodePointer"},{"name":"Ordinal","value":"0"},{"name":"FunctionAddress","value":"0x77995f60"}],"timestamp":"2026-07-19 16:33:26,356","timestamp_epoch":"2026-07-19 16:33:26,356","call_order":115,"extraction_index":117,"global_index":114},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetDllHandle","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"FileName","value":"api-ms-win-core-com-l1-1-0"},{"name":"ModuleHandle","value":"0x76130000"}],"timestamp":"2026-07-19 16:33:26,356","timestamp_epoch":"2026-07-19 16:33:26,356","call_order":116,"extraction_index":118,"global_index":115},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"combase.dll"},{"name":"ModuleHandle","value":"0x76130000"},{"name":"FunctionName","value":"CoUninitialize"},{"name":"Ordinal","value":"0"},{"name":"FunctionAddress","value":"0x761bd5f0"}],"timestamp":"2026-07-19 16:33:26,356","timestamp_epoch":"2026-07-19 16:33:26,356","call_order":117,"extraction_index":119,"global_index":116},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"ntdll.dll"},{"name":"ModuleHandle","value":"0x77930000"},{"name":"FunctionName","value":"RtlInitializeCriticalSection"},{"name":"Ordinal","value":"0"},{"name":"FunctionAddress","value":"0x7798c860"}],"timestamp":"2026-07-19 16:33:26,356","timestamp_epoch":"2026-07-19 16:33:26,356","call_order":118,"extraction_index":120,"global_index":117},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"ntdll.dll"},{"name":"ModuleHandle","value":"0x77930000"},{"name":"FunctionName","value":"RtlReAllocateHeap"},{"name":"Ordinal","value":"0"},{"name":"FunctionAddress","value":"0x779728f0"}],"timestamp":"2026-07-19 16:33:26,356","timestamp_epoch":"2026-07-19 16:33:26,356","call_order":119,"extraction_index":121,"global_index":118},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"ntdll.dll"},{"name":"ModuleHandle","value":"0x77930000"},{"name":"FunctionName","value":"RtlInitializeSListHead"},{"name":"Ordinal","value":"0"},{"name":"FunctionAddress","value":"0x77998df0"}],"timestamp":"2026-07-19 16:33:26,356","timestamp_epoch":"2026-07-19 16:33:26,356","call_order":120,"extraction_index":122,"global_index":119},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"ntdll.dll"},{"name":"ModuleHandle","value":"0x77930000"},{"name":"FunctionName","value":"RtlSizeHeap"},{"name":"Ordinal","value":"0"},{"name":"FunctionAddress","value":"0x7798bdc0"}],"timestamp":"2026-07-19 16:33:26,356","timestamp_epoch":"2026-07-19 16:33:26,356","call_order":121,"extraction_index":123,"global_index":120},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"ntdll.dll"},{"name":"ModuleHandle","value":"0x77930000"},{"name":"FunctionName","value":"RtlEnterCriticalSection"},{"name":"Ordinal","value":"0"},{"name":"FunctionAddress","value":"0x779700c0"}],"timestamp":"2026-07-19 16:33:26,356","timestamp_epoch":"2026-07-19 16:33:26,356","call_order":122,"extraction_index":124,"global_index":121},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"ntdll.dll"},{"name":"ModuleHandle","value":"0x77930000"},{"name":"FunctionName","value":"RtlDeleteCriticalSection"},{"name":"Ordinal","value":"0"},{"name":"FunctionAddress","value":"0x7795fc80"}],"timestamp":"2026-07-19 16:33:26,356","timestamp_epoch":"2026-07-19 16:33:26,356","call_order":123,"extraction_index":125,"global_index":122},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"ntdll.dll"},{"name":"ModuleHandle","value":"0x77930000"},{"name":"FunctionName","value":"RtlWakeAllConditionVariable"},{"name":"Ordinal","value":"0"},{"name":"FunctionAddress","value":"0x7799acc0"}],"timestamp":"2026-07-19 16:33:26,356","timestamp_epoch":"2026-07-19 16:33:26,356","call_order":124,"extraction_index":126,"global_index":123},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"WS2_32.dll"},{"name":"ModuleHandle","value":"0x76d00000"},{"name":"FunctionName","value":""},{"name":"Ordinal","value":"3"},{"name":"FunctionAddress","value":"0x76d0ea60"}],"timestamp":"2026-07-19 16:33:26,356","timestamp_epoch":"2026-07-19 16:33:26,356","call_order":125,"extraction_index":127,"global_index":124},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetDllHandle","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"FileName","value":"api-ms-win-core-synch-l1-2-0"},{"name":"ModuleHandle","value":"0x75ef0000"}],"timestamp":"2026-07-19 16:33:26,356","timestamp_epoch":"2026-07-19 16:33:26,356","call_order":126,"extraction_index":128,"global_index":125},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"KERNELBASE.dll"},{"name":"ModuleHandle","value":"0x75ef0000"},{"name":"FunctionName","value":"SleepConditionVariableSRW"},{"name":"Ordinal","value":"0"},{"name":"FunctionAddress","value":"0x76025580"}],"timestamp":"2026-07-19 16:33:26,356","timestamp_epoch":"2026-07-19 16:33:26,356","call_order":127,"extraction_index":129,"global_index":126},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"ntdll.dll"},{"name":"ModuleHandle","value":"0x77930000"},{"name":"FunctionName","value":"RtlTryAcquireSRWLockExclusive"},{"name":"Ordinal","value":"0"},{"name":"FunctionAddress","value":"0x779a2fc0"}],"timestamp":"2026-07-19 16:33:26,356","timestamp_epoch":"2026-07-19 16:33:26,356","call_order":128,"extraction_index":130,"global_index":127},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"WS2_32.dll"},{"name":"ModuleHandle","value":"0x76d00000"},{"name":"FunctionName","value":""},{"name":"Ordinal","value":"4"},{"name":"FunctionAddress","value":"0x76d15710"}],"timestamp":"2026-07-19 16:33:26,356","timestamp_epoch":"2026-07-19 16:33:26,356","call_order":129,"extraction_index":131,"global_index":128},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"WS2_32.dll"},{"name":"ModuleHandle","value":"0x76d00000"},{"name":"FunctionName","value":""},{"name":"Ordinal","value":"116"},{"name":"FunctionAddress","value":"0x76d06400"}],"timestamp":"2026-07-19 16:33:26,356","timestamp_epoch":"2026-07-19 16:33:26,356","call_order":130,"extraction_index":132,"global_index":129},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetDllHandle","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"FileName","value":"api-ms-win-core-com-l1-1-0"},{"name":"ModuleHandle","value":"0x76130000"}],"timestamp":"2026-07-19 16:33:26,356","timestamp_epoch":"2026-07-19 16:33:26,356","call_order":131,"extraction_index":133,"global_index":130},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"combase.dll"},{"name":"ModuleHandle","value":"0x76130000"},{"name":"FunctionName","value":"CoInitializeEx"},{"name":"Ordinal","value":"0"},{"name":"FunctionAddress","value":"0x761bd5a0"}],"timestamp":"2026-07-19 16:33:26,356","timestamp_epoch":"2026-07-19 16:33:26,356","call_order":132,"extraction_index":134,"global_index":131},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"WS2_32.dll"},{"name":"ModuleHandle","value":"0x76d00000"},{"name":"FunctionName","value":""},{"name":"Ordinal","value":"111"},{"name":"FunctionAddress","value":"0x76d05d50"}],"timestamp":"2026-07-19 16:33:26,356","timestamp_epoch":"2026-07-19 16:33:26,356","call_order":133,"extraction_index":135,"global_index":132},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtProtectVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x001dd000"},{"name":"ModuleName","value":"rp-019f79b8d2487453a.exe"},{"name":"NumberOfBytesProtected","value":"0x00001000"},{"name":"MemoryType","value":"0x01000000"},{"name":"NewAccessProtection","value":"0x00000040","pretty_value":"PAGE_EXECUTE_READWRITE"},{"name":"OldAccessProtection","value":"0x00000040","pretty_value":"PAGE_EXECUTE_READWRITE"},{"name":"StackPivoted","value":"no"}],"timestamp":"2026-07-19 16:33:26,402","timestamp_epoch":"2026-07-19 16:33:26,402","call_order":134,"extraction_index":136,"global_index":133},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtProtectVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x001dd000"},{"name":"ModuleName","value":"rp-019f79b8d2487453a.exe"},{"name":"NumberOfBytesProtected","value":"0x00001000"},{"name":"MemoryType","value":"0x00000000"},{"name":"NewAccessProtection","value":"0x00000002","pretty_value":"PAGE_READONLY"},{"name":"OldAccessProtection","value":"0x00000040","pretty_value":"PAGE_EXECUTE_READWRITE"},{"name":"StackPivoted","value":"no"}],"timestamp":"2026-07-19 16:33:26,402","timestamp_epoch":"2026-07-19 16:33:26,402","call_order":135,"extraction_index":137,"global_index":134},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtProtectVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x00203000"},{"name":"ModuleName","value":"rp-019f79b8d2487453a.exe"},{"name":"NumberOfBytesProtected","value":"0x00001000"},{"name":"MemoryType","value":"0x00000000"},{"name":"NewAccessProtection","value":"0x00000002","pretty_value":"PAGE_READONLY"},{"name":"OldAccessProtection","value":"0x00000040","pretty_value":"PAGE_EXECUTE_READWRITE"},{"name":"StackPivoted","value":"no"}],"timestamp":"2026-07-19 16:33:26,402","timestamp_epoch":"2026-07-19 16:33:26,402","call_order":136,"extraction_index":138,"global_index":135},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtProtectVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x00081000"},{"name":"ModuleName","value":"rp-019f79b8d2487453a.exe"},{"name":"NumberOfBytesProtected","value":"0x0015c000"},{"name":"MemoryType","value":"0x00000000"},{"name":"NewAccessProtection","value":"0x00000004","pretty_value":"PAGE_READWRITE"},{"name":"OldAccessProtection","value":"0x00000020","pretty_value":"PAGE_EXECUTE_READ"},{"name":"StackPivoted","value":"no"}],"timestamp":"2026-07-19 16:33:26,402","timestamp_epoch":"2026-07-19 16:33:26,402","call_order":137,"extraction_index":139,"global_index":136},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtProtectVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x001dd000"},{"name":"ModuleName","value":"rp-019f79b8d2487453a.exe"},{"name":"NumberOfBytesProtected","value":"0x00028000"},{"name":"MemoryType","value":"0x00000000"},{"name":"NewAccessProtection","value":"0x00000004","pretty_value":"PAGE_READWRITE"},{"name":"OldAccessProtection","value":"0x00000002","pretty_value":"PAGE_READONLY"},{"name":"StackPivoted","value":"no"}],"timestamp":"2026-07-19 16:33:26,402","timestamp_epoch":"2026-07-19 16:33:26,402","call_order":138,"extraction_index":140,"global_index":137},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtProtectVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x00205000"},{"name":"ModuleName","value":"rp-019f79b8d2487453a.exe"},{"name":"NumberOfBytesProtected","value":"0x00005000"},{"name":"MemoryType","value":"0x01000000"},{"name":"NewAccessProtection","value":"0x00000004","pretty_value":"PAGE_READWRITE"},{"name":"OldAccessProtection","value":"0x00000004","pretty_value":"PAGE_READWRITE"},{"name":"StackPivoted","value":"no"}],"timestamp":"2026-07-19 16:33:26,402","timestamp_epoch":"2026-07-19 16:33:26,402","call_order":139,"extraction_index":141,"global_index":138},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtProtectVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x00081000"},{"name":"ModuleName","value":"rp-019f79b8d2487453a.exe"},{"name":"NumberOfBytesProtected","value":"0x0015c000"},{"name":"MemoryType","value":"0x00000000"},{"name":"NewAccessProtection","value":"0x00000020","pretty_value":"PAGE_EXECUTE_READ"},{"name":"OldAccessProtection","value":"0x00000004","pretty_value":"PAGE_READWRITE"},{"name":"StackPivoted","value":"no"}],"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","call_order":140,"extraction_index":142,"global_index":139},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtProtectVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x001dd000"},{"name":"ModuleName","value":"rp-019f79b8d2487453a.exe"},{"name":"NumberOfBytesProtected","value":"0x00028000"},{"name":"MemoryType","value":"0x00000000"},{"name":"NewAccessProtection","value":"0x00000002","pretty_value":"PAGE_READONLY"},{"name":"OldAccessProtection","value":"0x00000004","pretty_value":"PAGE_READWRITE"},{"name":"StackPivoted","value":"no"}],"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","call_order":141,"extraction_index":143,"global_index":140},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtProtectVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x00205000"},{"name":"ModuleName","value":"rp-019f79b8d2487453a.exe"},{"name":"NumberOfBytesProtected","value":"0x00005000"},{"name":"MemoryType","value":"0x01000000"},{"name":"NewAccessProtection","value":"0x00000004","pretty_value":"PAGE_READWRITE"},{"name":"OldAccessProtection","value":"0x00000004","pretty_value":"PAGE_READWRITE"},{"name":"StackPivoted","value":"no"}],"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","call_order":142,"extraction_index":144,"global_index":141},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtProtectVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x00080000"},{"name":"ModuleName","value":"rp-019f79b8d2487453a.exe"},{"name":"NumberOfBytesProtected","value":"0x00001000"},{"name":"MemoryType","value":"0x00000000"},{"name":"NewAccessProtection","value":"0x00000004","pretty_value":"PAGE_READWRITE"},{"name":"OldAccessProtection","value":"0x00000002","pretty_value":"PAGE_READONLY"},{"name":"StackPivoted","value":"no"}],"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","call_order":143,"extraction_index":145,"global_index":142},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtProtectVirtualMemory","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x00080000"},{"name":"ModuleName","value":"rp-019f79b8d2487453a.exe"},{"name":"NumberOfBytesProtected","value":"0x00001000"},{"name":"MemoryType","value":"0x00000000"},{"name":"NewAccessProtection","value":"0x00000002","pretty_value":"PAGE_READONLY"},{"name":"OldAccessProtection","value":"0x00000004","pretty_value":"PAGE_READWRITE"},{"name":"StackPivoted","value":"no"}],"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","call_order":144,"extraction_index":146,"global_index":143},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetSystemTimeAsFileTime","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[],"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","call_order":145,"extraction_index":147,"global_index":144},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrLoadDll","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Flags","value":"0x00000000"},{"name":"FileName","value":"api-ms-win-core-synch-l1-2-0"},{"name":"BaseAddress","value":"0x75ef0000"}],"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","call_order":146,"extraction_index":148,"global_index":145},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LoadLibraryExW","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"lpLibFileName","value":"api-ms-win-core-synch-l1-2-0"},{"name":"dwFlags","value":"0x00000800"}],"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","call_order":147,"extraction_index":149,"global_index":146},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"KERNELBASE.dll"},{"name":"ModuleHandle","value":"0x75ef0000"},{"name":"FunctionName","value":"InitializeCriticalSectionEx"},{"name":"Ordinal","value":"0"},{"name":"FunctionAddress","value":"0x76024cc0"}],"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","call_order":148,"extraction_index":150,"global_index":147},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrLoadDll","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Flags","value":"0x00000000"},{"name":"FileName","value":"api-ms-win-core-fibers-l1-1-1"},{"name":"BaseAddress","value":"0x75ef0000"}],"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","call_order":149,"extraction_index":151,"global_index":148},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LoadLibraryExW","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"lpLibFileName","value":"api-ms-win-core-fibers-l1-1-1"},{"name":"dwFlags","value":"0x00000800"}],"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","call_order":150,"extraction_index":152,"global_index":149},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"KERNELBASE.dll"},{"name":"ModuleHandle","value":"0x75ef0000"},{"name":"FunctionName","value":"FlsAlloc"},{"name":"Ordinal","value":"0"},{"name":"FunctionAddress","value":"0x76028e50"}],"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","call_order":151,"extraction_index":153,"global_index":150},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"KERNELBASE.dll"},{"name":"ModuleHandle","value":"0x75ef0000"},{"name":"FunctionName","value":"FlsSetValue"},{"name":"Ordinal","value":"0"},{"name":"FunctionAddress","value":"0x7601be80"}],"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","call_order":152,"extraction_index":154,"global_index":151},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrLoadDll","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Flags","value":"0x00000000"},{"name":"FileName","value":"api-ms-win-core-synch-l1-2-0"},{"name":"BaseAddress","value":"0x75ef0000"}],"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","call_order":153,"extraction_index":155,"global_index":152},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LoadLibraryExW","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"lpLibFileName","value":"api-ms-win-core-synch-l1-2-0"},{"name":"dwFlags","value":"0x00000800"}],"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","call_order":154,"extraction_index":156,"global_index":153},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"KERNELBASE.dll"},{"name":"ModuleHandle","value":"0x75ef0000"},{"name":"FunctionName","value":"InitializeCriticalSectionEx"},{"name":"Ordinal","value":"0"},{"name":"FunctionAddress","value":"0x76024cc0"}],"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","call_order":155,"extraction_index":157,"global_index":154},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrLoadDll","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Flags","value":"0x00000000"},{"name":"FileName","value":"api-ms-win-core-fibers-l1-1-0"},{"name":"BaseAddress","value":"0x75ef0000"}],"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","call_order":156,"extraction_index":158,"global_index":155},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LoadLibraryExW","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"lpLibFileName","value":"api-ms-win-core-fibers-l1-1-0"},{"name":"dwFlags","value":"0x00000800"}],"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","call_order":157,"extraction_index":159,"global_index":156},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"KERNELBASE.dll"},{"name":"ModuleHandle","value":"0x75ef0000"},{"name":"FunctionName","value":"FlsAlloc"},{"name":"Ordinal","value":"0"},{"name":"FunctionAddress","value":"0x76028e50"}],"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","call_order":158,"extraction_index":160,"global_index":157},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"KERNELBASE.dll"},{"name":"ModuleHandle","value":"0x75ef0000"},{"name":"FunctionName","value":"FlsGetValue"},{"name":"Ordinal","value":"0"},{"name":"FunctionAddress","value":"0x75ffea90"}],"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","call_order":159,"extraction_index":161,"global_index":158},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"KERNELBASE.dll"},{"name":"ModuleHandle","value":"0x75ef0000"},{"name":"FunctionName","value":"FlsSetValue"},{"name":"Ordinal","value":"0"},{"name":"FunctionAddress","value":"0x7601be80"}],"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","call_order":160,"extraction_index":162,"global_index":159},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrLoadDll","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Flags","value":"0x00000000"},{"name":"FileName","value":"api-ms-win-core-localization-l1-2-1"},{"name":"BaseAddress","value":"0x75ef0000"}],"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","call_order":161,"extraction_index":163,"global_index":160},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LoadLibraryExW","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"lpLibFileName","value":"api-ms-win-core-localization-l1-2-1"},{"name":"dwFlags","value":"0x00000800"}],"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","call_order":162,"extraction_index":164,"global_index":161},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"KERNELBASE.dll"},{"name":"ModuleHandle","value":"0x75ef0000"},{"name":"FunctionName","value":"LCMapStringEx"},{"name":"Ordinal","value":"0"},{"name":"FunctionAddress","value":"0x7600f940"}],"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","call_order":163,"extraction_index":165,"global_index":162},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrLoadDll","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Flags","value":"0x00000000"},{"name":"FileName","value":"kernel32"},{"name":"BaseAddress","value":"0x77750000"}],"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","call_order":164,"extraction_index":166,"global_index":163},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LoadLibraryExW","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"lpLibFileName","value":"kernel32"},{"name":"dwFlags","value":"0x00000800"}],"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","call_order":165,"extraction_index":167,"global_index":164},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"KERNEL32.DLL"},{"name":"ModuleHandle","value":"0x77750000"},{"name":"FunctionName","value":"AreFileApisANSI"},{"name":"Ordinal","value":"0"},{"name":"FunctionAddress","value":"0x77772020"}],"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","call_order":166,"extraction_index":168,"global_index":165},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetDllHandle","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"FileName","value":"kernel32.dll"},{"name":"ModuleHandle","value":"0x77750000"}],"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","call_order":167,"extraction_index":169,"global_index":166},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"KERNEL32.DLL"},{"name":"ModuleHandle","value":"0x77750000"},{"name":"FunctionName","value":"GetCurrentPackageId"},{"name":"Ordinal","value":"0"},{"name":"FunctionAddress","value":"0x7602ab00"}],"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","call_order":168,"extraction_index":170,"global_index":167},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"KERNEL32.DLL"},{"name":"ModuleHandle","value":"0x77750000"},{"name":"FunctionName","value":"GetSystemTimePreciseAsFileTime"},{"name":"Ordinal","value":"0"},{"name":"FunctionAddress","value":"0x77773880"}],"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","call_order":169,"extraction_index":171,"global_index":168},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"KERNEL32.DLL"},{"name":"ModuleHandle","value":"0x77750000"},{"name":"FunctionName","value":"GetTempPath2W"},{"name":"Ordinal","value":"0"},{"name":"FunctionAddress","value":"0x7604edd0"}],"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","call_order":170,"extraction_index":172,"global_index":169},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"SetUnhandledExceptionFilter","category":"hooking","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ExceptionFilter","value":"0x000b431d"}],"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","call_order":171,"extraction_index":173,"global_index":170},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrLoadDll","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Flags","value":"0x00000000"},{"name":"FileName","value":"api-ms-win-core-string-l1-1-0"},{"name":"BaseAddress","value":"0x75ef0000"}],"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","call_order":172,"extraction_index":174,"global_index":171},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LoadLibraryExW","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"lpLibFileName","value":"api-ms-win-core-string-l1-1-0"},{"name":"dwFlags","value":"0x00000800"}],"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","call_order":173,"extraction_index":175,"global_index":172},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"KERNELBASE.dll"},{"name":"ModuleHandle","value":"0x75ef0000"},{"name":"FunctionName","value":"CompareStringEx"},{"name":"Ordinal","value":"0"},{"name":"FunctionAddress","value":"0x75ff4e50"}],"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","call_order":174,"extraction_index":176,"global_index":173},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"KERNELBASE.dll"},{"name":"ModuleHandle","value":"0x75ef0000"},{"name":"FunctionName","value":"EnumSystemLocalesEx"},{"name":"Ordinal","value":"0"},{"name":"FunctionAddress","value":"0x75fec900"}],"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","call_order":175,"extraction_index":177,"global_index":174},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrLoadDll","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Flags","value":"0x00000000"},{"name":"FileName","value":"api-ms-win-core-datetime-l1-1-1"},{"name":"BaseAddress","value":"0x75ef0000"}],"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","call_order":176,"extraction_index":178,"global_index":175},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LoadLibraryExW","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"lpLibFileName","value":"api-ms-win-core-datetime-l1-1-1"},{"name":"dwFlags","value":"0x00000800"}],"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","call_order":177,"extraction_index":179,"global_index":176},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"KERNELBASE.dll"},{"name":"ModuleHandle","value":"0x75ef0000"},{"name":"FunctionName","value":"GetDateFormatEx"},{"name":"Ordinal","value":"0"},{"name":"FunctionAddress","value":"0x7607c810"}],"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","call_order":178,"extraction_index":180,"global_index":177},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"KERNELBASE.dll"},{"name":"ModuleHandle","value":"0x75ef0000"},{"name":"FunctionName","value":"GetLocaleInfoEx"},{"name":"Ordinal","value":"0"},{"name":"FunctionAddress","value":"0x76008d00"}],"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","call_order":179,"extraction_index":181,"global_index":178},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"KERNELBASE.dll"},{"name":"ModuleHandle","value":"0x75ef0000"},{"name":"FunctionName","value":"GetTimeFormatEx"},{"name":"Ordinal","value":"0"},{"name":"FunctionAddress","value":"0x7607cb10"}],"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","call_order":180,"extraction_index":182,"global_index":179},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"KERNELBASE.dll"},{"name":"ModuleHandle","value":"0x75ef0000"},{"name":"FunctionName","value":"GetUserDefaultLocaleName"},{"name":"Ordinal","value":"0"},{"name":"FunctionAddress","value":"0x7601abc0"}],"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","call_order":181,"extraction_index":183,"global_index":180},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"KERNELBASE.dll"},{"name":"ModuleHandle","value":"0x75ef0000"},{"name":"FunctionName","value":"IsValidLocaleName"},{"name":"Ordinal","value":"0"},{"name":"FunctionAddress","value":"0x7602a9a0"}],"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","call_order":182,"extraction_index":184,"global_index":181},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrLoadDll","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Flags","value":"0x00000000"},{"name":"FileName","value":"api-ms-win-core-localization-obsolete-l1-2-0"},{"name":"BaseAddress","value":"0x75ef0000"}],"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","call_order":183,"extraction_index":185,"global_index":182},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LoadLibraryExW","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"lpLibFileName","value":"api-ms-win-core-localization-obsolete-l1-2-0"},{"name":"dwFlags","value":"0x00000800"}],"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","call_order":184,"extraction_index":186,"global_index":183},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"KERNELBASE.dll"},{"name":"ModuleHandle","value":"0x75ef0000"},{"name":"FunctionName","value":"LCIDToLocaleName"},{"name":"Ordinal","value":"0"},{"name":"FunctionAddress","value":"0x76029b60"}],"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","call_order":185,"extraction_index":187,"global_index":184},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrGetProcedureAddressForCaller","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ModuleName","value":"KERNELBASE.dll"},{"name":"ModuleHandle","value":"0x75ef0000"},{"name":"FunctionName","value":"LocaleNameToLCID"},{"name":"Ordinal","value":"0"},{"name":"FunctionAddress","value":"0x76029920"}],"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","call_order":186,"extraction_index":188,"global_index":185},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"37"}],"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","call_order":187,"extraction_index":189,"global_index":186},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetSystemTimeAsFileTime","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[],"timestamp":"2026-07-19 16:33:26,496","timestamp_epoch":"2026-07-19 16:33:26,496","call_order":188,"extraction_index":190,"global_index":187},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtSetInformationProcess","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessInformationClass","value":"18"},{"name":"ProcessInformation","value":"\\x00\\x06"}],"timestamp":"2026-07-19 16:33:26,496","timestamp_epoch":"2026-07-19 16:33:26,496","call_order":189,"extraction_index":191,"global_index":188},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"SetUnhandledExceptionFilter","category":"hooking","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ExceptionFilter","value":"0x000ddc40"}],"timestamp":"2026-07-19 16:33:26,496","timestamp_epoch":"2026-07-19 16:33:26,496","call_order":190,"extraction_index":192,"global_index":189},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrLoadDll","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Flags","value":"0x00000000"},{"name":"FileName","value":"user32"},{"name":"BaseAddress","value":"0x75cc0000"}],"timestamp":"2026-07-19 16:33:26,496","timestamp_epoch":"2026-07-19 16:33:26,496","call_order":191,"extraction_index":193,"global_index":190},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"DllLoadNotification","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"NotificationReason","value":"load"},{"name":"DllName","value":"C:\\Windows\\system32\\uxtheme"},{"name":"DllBase","value":"0x742e0000"}],"timestamp":"2026-07-19 16:33:26,496","timestamp_epoch":"2026-07-19 16:33:26,496","call_order":192,"extraction_index":194,"global_index":191},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrLoadDll","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Flags","value":"0x00000000"},{"name":"FileName","value":"C:\\Windows\\System32\\uxtheme.dll"},{"name":"BaseAddress","value":"0x742e0000"}],"timestamp":"2026-07-19 16:33:26,496","timestamp_epoch":"2026-07-19 16:33:26,496","call_order":193,"extraction_index":195,"global_index":192},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"DllLoadNotification","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"NotificationReason","value":"load"},{"name":"DllName","value":"C:\\Windows\\System32\\bcryptPrimitives"},{"name":"DllBase","value":"0x76960000"}],"timestamp":"2026-07-19 16:33:26,496","timestamp_epoch":"2026-07-19 16:33:26,496","call_order":194,"extraction_index":196,"global_index":193},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"682"},{"name":"y","value":"344"}],"timestamp":"2026-07-19 16:33:26,496","timestamp_epoch":"2026-07-19 16:33:26,496","call_order":195,"extraction_index":197,"global_index":194},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:26,496","timestamp_epoch":"2026-07-19 16:33:26,496","call_order":196,"extraction_index":198,"global_index":195},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:33:26,496","timestamp_epoch":"2026-07-19 16:33:26,496","call_order":197,"extraction_index":199,"global_index":196},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:27,512","timestamp_epoch":"2026-07-19 16:33:27,512","call_order":198,"extraction_index":200,"global_index":197},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:33:27,512","timestamp_epoch":"2026-07-19 16:33:27,512","call_order":199,"extraction_index":201,"global_index":198},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:27,527","timestamp_epoch":"2026-07-19 16:33:27,527","call_order":200,"extraction_index":202,"global_index":199},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:33:27,527","timestamp_epoch":"2026-07-19 16:33:27,527","call_order":201,"extraction_index":203,"global_index":200},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:28,543","timestamp_epoch":"2026-07-19 16:33:28,543","call_order":202,"extraction_index":204,"global_index":201},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:33:28,543","timestamp_epoch":"2026-07-19 16:33:28,543","call_order":203,"extraction_index":205,"global_index":202},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:28,559","timestamp_epoch":"2026-07-19 16:33:28,559","call_order":204,"extraction_index":206,"global_index":203},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:33:28,559","timestamp_epoch":"2026-07-19 16:33:28,559","call_order":205,"extraction_index":207,"global_index":204},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:29,574","timestamp_epoch":"2026-07-19 16:33:29,574","call_order":206,"extraction_index":208,"global_index":205},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:33:29,574","timestamp_epoch":"2026-07-19 16:33:29,574","call_order":207,"extraction_index":209,"global_index":206},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:29,590","timestamp_epoch":"2026-07-19 16:33:29,590","call_order":208,"extraction_index":210,"global_index":207},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:33:29,590","timestamp_epoch":"2026-07-19 16:33:29,590","call_order":209,"extraction_index":211,"global_index":208},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:30,606","timestamp_epoch":"2026-07-19 16:33:30,606","call_order":210,"extraction_index":212,"global_index":209},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:33:30,606","timestamp_epoch":"2026-07-19 16:33:30,606","call_order":211,"extraction_index":213,"global_index":210},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:30,621","timestamp_epoch":"2026-07-19 16:33:30,621","call_order":212,"extraction_index":214,"global_index":211},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:33:30,621","timestamp_epoch":"2026-07-19 16:33:30,621","call_order":213,"extraction_index":215,"global_index":212},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:31,637","timestamp_epoch":"2026-07-19 16:33:31,637","call_order":214,"extraction_index":216,"global_index":213},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:33:31,637","timestamp_epoch":"2026-07-19 16:33:31,637","call_order":215,"extraction_index":217,"global_index":214},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:31,652","timestamp_epoch":"2026-07-19 16:33:31,652","call_order":216,"extraction_index":218,"global_index":215},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:33:31,652","timestamp_epoch":"2026-07-19 16:33:31,652","call_order":217,"extraction_index":219,"global_index":216},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:32,668","timestamp_epoch":"2026-07-19 16:33:32,668","call_order":218,"extraction_index":220,"global_index":217},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:33:32,668","timestamp_epoch":"2026-07-19 16:33:32,668","call_order":219,"extraction_index":221,"global_index":218},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:32,684","timestamp_epoch":"2026-07-19 16:33:32,684","call_order":220,"extraction_index":222,"global_index":219},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:33:32,684","timestamp_epoch":"2026-07-19 16:33:32,684","call_order":221,"extraction_index":223,"global_index":220},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:33,699","timestamp_epoch":"2026-07-19 16:33:33,699","call_order":222,"extraction_index":224,"global_index":221},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:33:33,699","timestamp_epoch":"2026-07-19 16:33:33,699","call_order":223,"extraction_index":225,"global_index":222},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:33,715","timestamp_epoch":"2026-07-19 16:33:33,715","call_order":224,"extraction_index":226,"global_index":223},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:33:33,715","timestamp_epoch":"2026-07-19 16:33:33,715","call_order":225,"extraction_index":227,"global_index":224},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:34,731","timestamp_epoch":"2026-07-19 16:33:34,731","call_order":226,"extraction_index":228,"global_index":225},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:33:34,731","timestamp_epoch":"2026-07-19 16:33:34,731","call_order":227,"extraction_index":229,"global_index":226},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:34,746","timestamp_epoch":"2026-07-19 16:33:34,746","call_order":228,"extraction_index":230,"global_index":227},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:33:34,746","timestamp_epoch":"2026-07-19 16:33:34,746","call_order":229,"extraction_index":231,"global_index":228},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:35,762","timestamp_epoch":"2026-07-19 16:33:35,762","call_order":230,"extraction_index":232,"global_index":229},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:33:35,762","timestamp_epoch":"2026-07-19 16:33:35,762","call_order":231,"extraction_index":233,"global_index":230},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:35,777","timestamp_epoch":"2026-07-19 16:33:35,777","call_order":232,"extraction_index":234,"global_index":231},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:33:35,777","timestamp_epoch":"2026-07-19 16:33:35,777","call_order":233,"extraction_index":235,"global_index":232},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:36,793","timestamp_epoch":"2026-07-19 16:33:36,793","call_order":234,"extraction_index":236,"global_index":233},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:33:36,793","timestamp_epoch":"2026-07-19 16:33:36,793","call_order":235,"extraction_index":237,"global_index":234},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:36,824","timestamp_epoch":"2026-07-19 16:33:36,824","call_order":236,"extraction_index":238,"global_index":235},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:33:36,824","timestamp_epoch":"2026-07-19 16:33:36,824","call_order":237,"extraction_index":239,"global_index":236},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:37,824","timestamp_epoch":"2026-07-19 16:33:37,824","call_order":238,"extraction_index":240,"global_index":237},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:33:37,824","timestamp_epoch":"2026-07-19 16:33:37,824","call_order":239,"extraction_index":241,"global_index":238},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:37,840","timestamp_epoch":"2026-07-19 16:33:37,840","call_order":240,"extraction_index":242,"global_index":239},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:33:37,840","timestamp_epoch":"2026-07-19 16:33:37,840","call_order":241,"extraction_index":243,"global_index":240},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:38,856","timestamp_epoch":"2026-07-19 16:33:38,856","call_order":242,"extraction_index":244,"global_index":241},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:33:38,856","timestamp_epoch":"2026-07-19 16:33:38,856","call_order":243,"extraction_index":245,"global_index":242},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:38,871","timestamp_epoch":"2026-07-19 16:33:38,871","call_order":244,"extraction_index":246,"global_index":243},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:33:38,871","timestamp_epoch":"2026-07-19 16:33:38,871","call_order":245,"extraction_index":247,"global_index":244},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:39,871","timestamp_epoch":"2026-07-19 16:33:39,871","call_order":246,"extraction_index":248,"global_index":245},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:33:39,871","timestamp_epoch":"2026-07-19 16:33:39,871","call_order":247,"extraction_index":249,"global_index":246},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:39,887","timestamp_epoch":"2026-07-19 16:33:39,887","call_order":248,"extraction_index":250,"global_index":247},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:33:39,887","timestamp_epoch":"2026-07-19 16:33:39,887","call_order":249,"extraction_index":251,"global_index":248},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:40,887","timestamp_epoch":"2026-07-19 16:33:40,887","call_order":250,"extraction_index":252,"global_index":249},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:33:40,887","timestamp_epoch":"2026-07-19 16:33:40,887","call_order":251,"extraction_index":253,"global_index":250},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:40,902","timestamp_epoch":"2026-07-19 16:33:40,902","call_order":252,"extraction_index":254,"global_index":251},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:33:40,902","timestamp_epoch":"2026-07-19 16:33:40,902","call_order":253,"extraction_index":255,"global_index":252},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:41,918","timestamp_epoch":"2026-07-19 16:33:41,918","call_order":254,"extraction_index":256,"global_index":253},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:33:41,918","timestamp_epoch":"2026-07-19 16:33:41,918","call_order":255,"extraction_index":257,"global_index":254},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:41,934","timestamp_epoch":"2026-07-19 16:33:41,934","call_order":256,"extraction_index":258,"global_index":255},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:33:41,934","timestamp_epoch":"2026-07-19 16:33:41,934","call_order":257,"extraction_index":259,"global_index":256},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:42,934","timestamp_epoch":"2026-07-19 16:33:42,934","call_order":258,"extraction_index":260,"global_index":257},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:33:42,934","timestamp_epoch":"2026-07-19 16:33:42,934","call_order":259,"extraction_index":261,"global_index":258},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:42,949","timestamp_epoch":"2026-07-19 16:33:42,949","call_order":260,"extraction_index":262,"global_index":259},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:33:42,949","timestamp_epoch":"2026-07-19 16:33:42,949","call_order":261,"extraction_index":263,"global_index":260},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:43,949","timestamp_epoch":"2026-07-19 16:33:43,949","call_order":262,"extraction_index":264,"global_index":261},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:33:43,949","timestamp_epoch":"2026-07-19 16:33:43,949","call_order":263,"extraction_index":265,"global_index":262},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:43,965","timestamp_epoch":"2026-07-19 16:33:43,965","call_order":264,"extraction_index":266,"global_index":263},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:33:43,965","timestamp_epoch":"2026-07-19 16:33:43,965","call_order":265,"extraction_index":267,"global_index":264},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:44,981","timestamp_epoch":"2026-07-19 16:33:44,981","call_order":266,"extraction_index":268,"global_index":265},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:33:44,981","timestamp_epoch":"2026-07-19 16:33:44,981","call_order":267,"extraction_index":269,"global_index":266},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:44,996","timestamp_epoch":"2026-07-19 16:33:44,996","call_order":268,"extraction_index":270,"global_index":267},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:33:44,996","timestamp_epoch":"2026-07-19 16:33:44,996","call_order":269,"extraction_index":271,"global_index":268},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:45,996","timestamp_epoch":"2026-07-19 16:33:45,996","call_order":270,"extraction_index":272,"global_index":269},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:33:45,996","timestamp_epoch":"2026-07-19 16:33:45,996","call_order":271,"extraction_index":273,"global_index":270},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:46,012","timestamp_epoch":"2026-07-19 16:33:46,012","call_order":272,"extraction_index":274,"global_index":271},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:33:46,012","timestamp_epoch":"2026-07-19 16:33:46,012","call_order":273,"extraction_index":275,"global_index":272},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:47,012","timestamp_epoch":"2026-07-19 16:33:47,012","call_order":274,"extraction_index":276,"global_index":273},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:33:47,012","timestamp_epoch":"2026-07-19 16:33:47,012","call_order":275,"extraction_index":277,"global_index":274},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:47,027","timestamp_epoch":"2026-07-19 16:33:47,027","call_order":276,"extraction_index":278,"global_index":275},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:33:47,027","timestamp_epoch":"2026-07-19 16:33:47,027","call_order":277,"extraction_index":279,"global_index":276},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:48,027","timestamp_epoch":"2026-07-19 16:33:48,027","call_order":278,"extraction_index":280,"global_index":277},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:33:48,027","timestamp_epoch":"2026-07-19 16:33:48,027","call_order":279,"extraction_index":281,"global_index":278},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:48,043","timestamp_epoch":"2026-07-19 16:33:48,043","call_order":280,"extraction_index":282,"global_index":279},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:33:48,043","timestamp_epoch":"2026-07-19 16:33:48,043","call_order":281,"extraction_index":283,"global_index":280},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:49,059","timestamp_epoch":"2026-07-19 16:33:49,059","call_order":282,"extraction_index":284,"global_index":281},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:33:49,059","timestamp_epoch":"2026-07-19 16:33:49,059","call_order":283,"extraction_index":285,"global_index":282},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:49,074","timestamp_epoch":"2026-07-19 16:33:49,074","call_order":284,"extraction_index":286,"global_index":283},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:33:49,074","timestamp_epoch":"2026-07-19 16:33:49,074","call_order":285,"extraction_index":287,"global_index":284},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:50,090","timestamp_epoch":"2026-07-19 16:33:50,090","call_order":286,"extraction_index":288,"global_index":285},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:33:50,090","timestamp_epoch":"2026-07-19 16:33:50,090","call_order":287,"extraction_index":289,"global_index":286},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:50,106","timestamp_epoch":"2026-07-19 16:33:50,106","call_order":288,"extraction_index":290,"global_index":287},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:33:50,106","timestamp_epoch":"2026-07-19 16:33:50,106","call_order":289,"extraction_index":291,"global_index":288},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:51,121","timestamp_epoch":"2026-07-19 16:33:51,121","call_order":290,"extraction_index":292,"global_index":289},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:33:51,121","timestamp_epoch":"2026-07-19 16:33:51,121","call_order":291,"extraction_index":293,"global_index":290},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:51,137","timestamp_epoch":"2026-07-19 16:33:51,137","call_order":292,"extraction_index":294,"global_index":291},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:33:51,137","timestamp_epoch":"2026-07-19 16:33:51,137","call_order":293,"extraction_index":295,"global_index":292},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:52,152","timestamp_epoch":"2026-07-19 16:33:52,152","call_order":294,"extraction_index":296,"global_index":293},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:33:52,152","timestamp_epoch":"2026-07-19 16:33:52,152","call_order":295,"extraction_index":297,"global_index":294},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:52,168","timestamp_epoch":"2026-07-19 16:33:52,168","call_order":296,"extraction_index":298,"global_index":295},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:33:52,168","timestamp_epoch":"2026-07-19 16:33:52,168","call_order":297,"extraction_index":299,"global_index":296},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:53,184","timestamp_epoch":"2026-07-19 16:33:53,184","call_order":298,"extraction_index":300,"global_index":297},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:33:53,184","timestamp_epoch":"2026-07-19 16:33:53,184","call_order":299,"extraction_index":301,"global_index":298},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:53,199","timestamp_epoch":"2026-07-19 16:33:53,199","call_order":300,"extraction_index":302,"global_index":299},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:33:53,199","timestamp_epoch":"2026-07-19 16:33:53,199","call_order":301,"extraction_index":303,"global_index":300},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:54,215","timestamp_epoch":"2026-07-19 16:33:54,215","call_order":302,"extraction_index":304,"global_index":301},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:33:54,215","timestamp_epoch":"2026-07-19 16:33:54,215","call_order":303,"extraction_index":305,"global_index":302},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:54,231","timestamp_epoch":"2026-07-19 16:33:54,231","call_order":304,"extraction_index":306,"global_index":303},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:33:54,231","timestamp_epoch":"2026-07-19 16:33:54,231","call_order":305,"extraction_index":307,"global_index":304},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:55,246","timestamp_epoch":"2026-07-19 16:33:55,246","call_order":306,"extraction_index":308,"global_index":305},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:33:55,246","timestamp_epoch":"2026-07-19 16:33:55,246","call_order":307,"extraction_index":309,"global_index":306},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:55,262","timestamp_epoch":"2026-07-19 16:33:55,262","call_order":308,"extraction_index":310,"global_index":307},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:33:55,262","timestamp_epoch":"2026-07-19 16:33:55,262","call_order":309,"extraction_index":311,"global_index":308},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:56,277","timestamp_epoch":"2026-07-19 16:33:56,277","call_order":310,"extraction_index":312,"global_index":309},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:33:56,277","timestamp_epoch":"2026-07-19 16:33:56,277","call_order":311,"extraction_index":313,"global_index":310},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:56,293","timestamp_epoch":"2026-07-19 16:33:56,293","call_order":312,"extraction_index":314,"global_index":311},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:33:56,293","timestamp_epoch":"2026-07-19 16:33:56,293","call_order":313,"extraction_index":315,"global_index":312},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:57,309","timestamp_epoch":"2026-07-19 16:33:57,309","call_order":314,"extraction_index":316,"global_index":313},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:33:57,309","timestamp_epoch":"2026-07-19 16:33:57,309","call_order":315,"extraction_index":317,"global_index":314},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:57,324","timestamp_epoch":"2026-07-19 16:33:57,324","call_order":316,"extraction_index":318,"global_index":315},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:33:57,324","timestamp_epoch":"2026-07-19 16:33:57,324","call_order":317,"extraction_index":319,"global_index":316},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:58,340","timestamp_epoch":"2026-07-19 16:33:58,340","call_order":318,"extraction_index":320,"global_index":317},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:33:58,340","timestamp_epoch":"2026-07-19 16:33:58,340","call_order":319,"extraction_index":321,"global_index":318},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:58,356","timestamp_epoch":"2026-07-19 16:33:58,356","call_order":320,"extraction_index":322,"global_index":319},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:33:58,356","timestamp_epoch":"2026-07-19 16:33:58,356","call_order":321,"extraction_index":323,"global_index":320},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:59,371","timestamp_epoch":"2026-07-19 16:33:59,371","call_order":322,"extraction_index":324,"global_index":321},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:33:59,371","timestamp_epoch":"2026-07-19 16:33:59,371","call_order":323,"extraction_index":325,"global_index":322},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:33:59,387","timestamp_epoch":"2026-07-19 16:33:59,387","call_order":324,"extraction_index":326,"global_index":323},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:33:59,387","timestamp_epoch":"2026-07-19 16:33:59,387","call_order":325,"extraction_index":327,"global_index":324},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:00,402","timestamp_epoch":"2026-07-19 16:34:00,402","call_order":326,"extraction_index":328,"global_index":325},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:00,402","timestamp_epoch":"2026-07-19 16:34:00,402","call_order":327,"extraction_index":329,"global_index":326},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:00,418","timestamp_epoch":"2026-07-19 16:34:00,418","call_order":328,"extraction_index":330,"global_index":327},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:00,418","timestamp_epoch":"2026-07-19 16:34:00,418","call_order":329,"extraction_index":331,"global_index":328},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:01,434","timestamp_epoch":"2026-07-19 16:34:01,434","call_order":330,"extraction_index":332,"global_index":329},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:01,434","timestamp_epoch":"2026-07-19 16:34:01,434","call_order":331,"extraction_index":333,"global_index":330},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:01,449","timestamp_epoch":"2026-07-19 16:34:01,449","call_order":332,"extraction_index":334,"global_index":331},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:01,449","timestamp_epoch":"2026-07-19 16:34:01,449","call_order":333,"extraction_index":335,"global_index":332},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:02,465","timestamp_epoch":"2026-07-19 16:34:02,465","call_order":334,"extraction_index":336,"global_index":333},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:02,465","timestamp_epoch":"2026-07-19 16:34:02,465","call_order":335,"extraction_index":337,"global_index":334},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:02,481","timestamp_epoch":"2026-07-19 16:34:02,481","call_order":336,"extraction_index":338,"global_index":335},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:02,481","timestamp_epoch":"2026-07-19 16:34:02,481","call_order":337,"extraction_index":339,"global_index":336},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:03,496","timestamp_epoch":"2026-07-19 16:34:03,496","call_order":338,"extraction_index":340,"global_index":337},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:03,496","timestamp_epoch":"2026-07-19 16:34:03,496","call_order":339,"extraction_index":341,"global_index":338},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:03,512","timestamp_epoch":"2026-07-19 16:34:03,512","call_order":340,"extraction_index":342,"global_index":339},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:03,512","timestamp_epoch":"2026-07-19 16:34:03,512","call_order":341,"extraction_index":343,"global_index":340},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:04,527","timestamp_epoch":"2026-07-19 16:34:04,527","call_order":342,"extraction_index":344,"global_index":341},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:04,527","timestamp_epoch":"2026-07-19 16:34:04,527","call_order":343,"extraction_index":345,"global_index":342},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:04,543","timestamp_epoch":"2026-07-19 16:34:04,543","call_order":344,"extraction_index":346,"global_index":343},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:04,543","timestamp_epoch":"2026-07-19 16:34:04,543","call_order":345,"extraction_index":347,"global_index":344},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:05,559","timestamp_epoch":"2026-07-19 16:34:05,559","call_order":346,"extraction_index":348,"global_index":345},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:05,559","timestamp_epoch":"2026-07-19 16:34:05,559","call_order":347,"extraction_index":349,"global_index":346},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:05,574","timestamp_epoch":"2026-07-19 16:34:05,574","call_order":348,"extraction_index":350,"global_index":347},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:05,574","timestamp_epoch":"2026-07-19 16:34:05,574","call_order":349,"extraction_index":351,"global_index":348},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:06,590","timestamp_epoch":"2026-07-19 16:34:06,590","call_order":350,"extraction_index":352,"global_index":349},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:06,590","timestamp_epoch":"2026-07-19 16:34:06,590","call_order":351,"extraction_index":353,"global_index":350},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:06,606","timestamp_epoch":"2026-07-19 16:34:06,606","call_order":352,"extraction_index":354,"global_index":351},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:06,606","timestamp_epoch":"2026-07-19 16:34:06,606","call_order":353,"extraction_index":355,"global_index":352},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:07,621","timestamp_epoch":"2026-07-19 16:34:07,621","call_order":354,"extraction_index":356,"global_index":353},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:07,621","timestamp_epoch":"2026-07-19 16:34:07,621","call_order":355,"extraction_index":357,"global_index":354},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:07,637","timestamp_epoch":"2026-07-19 16:34:07,637","call_order":356,"extraction_index":358,"global_index":355},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:07,637","timestamp_epoch":"2026-07-19 16:34:07,637","call_order":357,"extraction_index":359,"global_index":356},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:08,652","timestamp_epoch":"2026-07-19 16:34:08,652","call_order":358,"extraction_index":360,"global_index":357},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:08,652","timestamp_epoch":"2026-07-19 16:34:08,652","call_order":359,"extraction_index":361,"global_index":358},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:08,668","timestamp_epoch":"2026-07-19 16:34:08,668","call_order":360,"extraction_index":362,"global_index":359},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:08,668","timestamp_epoch":"2026-07-19 16:34:08,668","call_order":361,"extraction_index":363,"global_index":360},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:09,684","timestamp_epoch":"2026-07-19 16:34:09,684","call_order":362,"extraction_index":364,"global_index":361},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:09,684","timestamp_epoch":"2026-07-19 16:34:09,684","call_order":363,"extraction_index":365,"global_index":362},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:09,699","timestamp_epoch":"2026-07-19 16:34:09,699","call_order":364,"extraction_index":366,"global_index":363},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:09,699","timestamp_epoch":"2026-07-19 16:34:09,699","call_order":365,"extraction_index":367,"global_index":364},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:10,715","timestamp_epoch":"2026-07-19 16:34:10,715","call_order":366,"extraction_index":368,"global_index":365},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:10,715","timestamp_epoch":"2026-07-19 16:34:10,715","call_order":367,"extraction_index":369,"global_index":366},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:10,731","timestamp_epoch":"2026-07-19 16:34:10,731","call_order":368,"extraction_index":370,"global_index":367},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:10,731","timestamp_epoch":"2026-07-19 16:34:10,731","call_order":369,"extraction_index":371,"global_index":368},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:11,746","timestamp_epoch":"2026-07-19 16:34:11,746","call_order":370,"extraction_index":372,"global_index":369},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:11,746","timestamp_epoch":"2026-07-19 16:34:11,746","call_order":371,"extraction_index":373,"global_index":370},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:11,762","timestamp_epoch":"2026-07-19 16:34:11,762","call_order":372,"extraction_index":374,"global_index":371},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:11,762","timestamp_epoch":"2026-07-19 16:34:11,762","call_order":373,"extraction_index":375,"global_index":372},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:12,777","timestamp_epoch":"2026-07-19 16:34:12,777","call_order":374,"extraction_index":376,"global_index":373},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:12,777","timestamp_epoch":"2026-07-19 16:34:12,777","call_order":375,"extraction_index":377,"global_index":374},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:12,793","timestamp_epoch":"2026-07-19 16:34:12,793","call_order":376,"extraction_index":378,"global_index":375},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:12,793","timestamp_epoch":"2026-07-19 16:34:12,793","call_order":377,"extraction_index":379,"global_index":376},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:13,809","timestamp_epoch":"2026-07-19 16:34:13,809","call_order":378,"extraction_index":380,"global_index":377},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:13,809","timestamp_epoch":"2026-07-19 16:34:13,809","call_order":379,"extraction_index":381,"global_index":378},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:13,824","timestamp_epoch":"2026-07-19 16:34:13,824","call_order":380,"extraction_index":382,"global_index":379},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:13,824","timestamp_epoch":"2026-07-19 16:34:13,824","call_order":381,"extraction_index":383,"global_index":380},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:14,840","timestamp_epoch":"2026-07-19 16:34:14,840","call_order":382,"extraction_index":384,"global_index":381},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:14,840","timestamp_epoch":"2026-07-19 16:34:14,840","call_order":383,"extraction_index":385,"global_index":382},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:14,856","timestamp_epoch":"2026-07-19 16:34:14,856","call_order":384,"extraction_index":386,"global_index":383},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:14,856","timestamp_epoch":"2026-07-19 16:34:14,856","call_order":385,"extraction_index":387,"global_index":384},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:15,871","timestamp_epoch":"2026-07-19 16:34:15,871","call_order":386,"extraction_index":388,"global_index":385},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:15,871","timestamp_epoch":"2026-07-19 16:34:15,871","call_order":387,"extraction_index":389,"global_index":386},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:15,887","timestamp_epoch":"2026-07-19 16:34:15,887","call_order":388,"extraction_index":390,"global_index":387},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:15,887","timestamp_epoch":"2026-07-19 16:34:15,887","call_order":389,"extraction_index":391,"global_index":388},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:16,902","timestamp_epoch":"2026-07-19 16:34:16,902","call_order":390,"extraction_index":392,"global_index":389},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:16,902","timestamp_epoch":"2026-07-19 16:34:16,902","call_order":391,"extraction_index":393,"global_index":390},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:16,918","timestamp_epoch":"2026-07-19 16:34:16,918","call_order":392,"extraction_index":394,"global_index":391},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:16,918","timestamp_epoch":"2026-07-19 16:34:16,918","call_order":393,"extraction_index":395,"global_index":392},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:17,934","timestamp_epoch":"2026-07-19 16:34:17,934","call_order":394,"extraction_index":396,"global_index":393},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:17,934","timestamp_epoch":"2026-07-19 16:34:17,934","call_order":395,"extraction_index":397,"global_index":394},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:17,949","timestamp_epoch":"2026-07-19 16:34:17,949","call_order":396,"extraction_index":398,"global_index":395},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:17,949","timestamp_epoch":"2026-07-19 16:34:17,949","call_order":397,"extraction_index":399,"global_index":396},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:18,965","timestamp_epoch":"2026-07-19 16:34:18,965","call_order":398,"extraction_index":400,"global_index":397},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:18,965","timestamp_epoch":"2026-07-19 16:34:18,965","call_order":399,"extraction_index":401,"global_index":398},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:18,981","timestamp_epoch":"2026-07-19 16:34:18,981","call_order":400,"extraction_index":402,"global_index":399},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:18,981","timestamp_epoch":"2026-07-19 16:34:18,981","call_order":401,"extraction_index":403,"global_index":400},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:19,996","timestamp_epoch":"2026-07-19 16:34:19,996","call_order":402,"extraction_index":404,"global_index":401},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:19,996","timestamp_epoch":"2026-07-19 16:34:19,996","call_order":403,"extraction_index":405,"global_index":402},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:20,012","timestamp_epoch":"2026-07-19 16:34:20,012","call_order":404,"extraction_index":406,"global_index":403},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:20,012","timestamp_epoch":"2026-07-19 16:34:20,012","call_order":405,"extraction_index":407,"global_index":404},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:21,027","timestamp_epoch":"2026-07-19 16:34:21,027","call_order":406,"extraction_index":408,"global_index":405},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:21,027","timestamp_epoch":"2026-07-19 16:34:21,027","call_order":407,"extraction_index":409,"global_index":406},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:21,043","timestamp_epoch":"2026-07-19 16:34:21,043","call_order":408,"extraction_index":410,"global_index":407},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:21,043","timestamp_epoch":"2026-07-19 16:34:21,043","call_order":409,"extraction_index":411,"global_index":408},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:22,059","timestamp_epoch":"2026-07-19 16:34:22,059","call_order":410,"extraction_index":412,"global_index":409},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:22,059","timestamp_epoch":"2026-07-19 16:34:22,059","call_order":411,"extraction_index":413,"global_index":410},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:22,074","timestamp_epoch":"2026-07-19 16:34:22,074","call_order":412,"extraction_index":414,"global_index":411},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:22,074","timestamp_epoch":"2026-07-19 16:34:22,074","call_order":413,"extraction_index":415,"global_index":412},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:23,090","timestamp_epoch":"2026-07-19 16:34:23,090","call_order":414,"extraction_index":416,"global_index":413},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:23,090","timestamp_epoch":"2026-07-19 16:34:23,090","call_order":415,"extraction_index":417,"global_index":414},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:23,106","timestamp_epoch":"2026-07-19 16:34:23,106","call_order":416,"extraction_index":418,"global_index":415},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:23,106","timestamp_epoch":"2026-07-19 16:34:23,106","call_order":417,"extraction_index":419,"global_index":416},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:24,121","timestamp_epoch":"2026-07-19 16:34:24,121","call_order":418,"extraction_index":420,"global_index":417},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:24,121","timestamp_epoch":"2026-07-19 16:34:24,121","call_order":419,"extraction_index":421,"global_index":418},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:24,137","timestamp_epoch":"2026-07-19 16:34:24,137","call_order":420,"extraction_index":422,"global_index":419},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:24,137","timestamp_epoch":"2026-07-19 16:34:24,137","call_order":421,"extraction_index":423,"global_index":420},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:25,152","timestamp_epoch":"2026-07-19 16:34:25,152","call_order":422,"extraction_index":424,"global_index":421},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:25,152","timestamp_epoch":"2026-07-19 16:34:25,152","call_order":423,"extraction_index":425,"global_index":422},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:25,168","timestamp_epoch":"2026-07-19 16:34:25,168","call_order":424,"extraction_index":426,"global_index":423},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:25,168","timestamp_epoch":"2026-07-19 16:34:25,168","call_order":425,"extraction_index":427,"global_index":424},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtQueryInformationThread","category":"threading","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ThreadHandle","value":"0xfffffffe"},{"name":"ThreadInformationClass","value":"12"},{"name":"ThreadInformation","value":"\\x00\\x00\\x00\\x00"},{"name":"ThreadId","value":"4164"}],"timestamp":"2026-07-19 16:34:25,762","timestamp_epoch":"2026-07-19 16:34:25,762","call_order":426,"extraction_index":428,"global_index":425},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtTerminateThread","category":"threading","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ThreadHandle","value":"0x00000000"},{"name":"ExitStatus","value":"0x00000000"},{"name":"ThreadId","value":"0"},{"name":"ProcessId","value":"0"}],"timestamp":"2026-07-19 16:34:25,762","timestamp_epoch":"2026-07-19 16:34:25,762","call_order":427,"extraction_index":429,"global_index":426},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:26,184","timestamp_epoch":"2026-07-19 16:34:26,184","call_order":428,"extraction_index":430,"global_index":427},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:26,184","timestamp_epoch":"2026-07-19 16:34:26,184","call_order":429,"extraction_index":431,"global_index":428},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:26,199","timestamp_epoch":"2026-07-19 16:34:26,199","call_order":430,"extraction_index":432,"global_index":429},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:26,199","timestamp_epoch":"2026-07-19 16:34:26,199","call_order":431,"extraction_index":433,"global_index":430},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:27,215","timestamp_epoch":"2026-07-19 16:34:27,215","call_order":432,"extraction_index":434,"global_index":431},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:27,215","timestamp_epoch":"2026-07-19 16:34:27,215","call_order":433,"extraction_index":435,"global_index":432},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:27,231","timestamp_epoch":"2026-07-19 16:34:27,231","call_order":434,"extraction_index":436,"global_index":433},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:27,231","timestamp_epoch":"2026-07-19 16:34:27,231","call_order":435,"extraction_index":437,"global_index":434},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:28,246","timestamp_epoch":"2026-07-19 16:34:28,246","call_order":436,"extraction_index":438,"global_index":435},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:28,246","timestamp_epoch":"2026-07-19 16:34:28,246","call_order":437,"extraction_index":439,"global_index":436},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:28,262","timestamp_epoch":"2026-07-19 16:34:28,262","call_order":438,"extraction_index":440,"global_index":437},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:28,262","timestamp_epoch":"2026-07-19 16:34:28,262","call_order":439,"extraction_index":441,"global_index":438},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:29,277","timestamp_epoch":"2026-07-19 16:34:29,277","call_order":440,"extraction_index":442,"global_index":439},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:29,277","timestamp_epoch":"2026-07-19 16:34:29,277","call_order":441,"extraction_index":443,"global_index":440},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:29,293","timestamp_epoch":"2026-07-19 16:34:29,293","call_order":442,"extraction_index":444,"global_index":441},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:29,293","timestamp_epoch":"2026-07-19 16:34:29,293","call_order":443,"extraction_index":445,"global_index":442},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:30,309","timestamp_epoch":"2026-07-19 16:34:30,309","call_order":444,"extraction_index":446,"global_index":443},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:30,309","timestamp_epoch":"2026-07-19 16:34:30,309","call_order":445,"extraction_index":447,"global_index":444},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:30,324","timestamp_epoch":"2026-07-19 16:34:30,324","call_order":446,"extraction_index":448,"global_index":445},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:30,324","timestamp_epoch":"2026-07-19 16:34:30,324","call_order":447,"extraction_index":449,"global_index":446},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:31,340","timestamp_epoch":"2026-07-19 16:34:31,340","call_order":448,"extraction_index":450,"global_index":447},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:31,340","timestamp_epoch":"2026-07-19 16:34:31,340","call_order":449,"extraction_index":451,"global_index":448},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:31,356","timestamp_epoch":"2026-07-19 16:34:31,356","call_order":450,"extraction_index":452,"global_index":449},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:31,356","timestamp_epoch":"2026-07-19 16:34:31,356","call_order":451,"extraction_index":453,"global_index":450},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:32,371","timestamp_epoch":"2026-07-19 16:34:32,371","call_order":452,"extraction_index":454,"global_index":451},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:32,371","timestamp_epoch":"2026-07-19 16:34:32,371","call_order":453,"extraction_index":455,"global_index":452},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:32,387","timestamp_epoch":"2026-07-19 16:34:32,387","call_order":454,"extraction_index":456,"global_index":453},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:32,387","timestamp_epoch":"2026-07-19 16:34:32,387","call_order":455,"extraction_index":457,"global_index":454},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:33,402","timestamp_epoch":"2026-07-19 16:34:33,402","call_order":456,"extraction_index":458,"global_index":455},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:33,402","timestamp_epoch":"2026-07-19 16:34:33,402","call_order":457,"extraction_index":459,"global_index":456},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:33,418","timestamp_epoch":"2026-07-19 16:34:33,418","call_order":458,"extraction_index":460,"global_index":457},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:33,418","timestamp_epoch":"2026-07-19 16:34:33,418","call_order":459,"extraction_index":461,"global_index":458},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:34,434","timestamp_epoch":"2026-07-19 16:34:34,434","call_order":460,"extraction_index":462,"global_index":459},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:34,434","timestamp_epoch":"2026-07-19 16:34:34,434","call_order":461,"extraction_index":463,"global_index":460},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:34,449","timestamp_epoch":"2026-07-19 16:34:34,449","call_order":462,"extraction_index":464,"global_index":461},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:34,449","timestamp_epoch":"2026-07-19 16:34:34,449","call_order":463,"extraction_index":465,"global_index":462},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:35,465","timestamp_epoch":"2026-07-19 16:34:35,465","call_order":464,"extraction_index":466,"global_index":463},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:35,465","timestamp_epoch":"2026-07-19 16:34:35,465","call_order":465,"extraction_index":467,"global_index":464},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:35,481","timestamp_epoch":"2026-07-19 16:34:35,481","call_order":466,"extraction_index":468,"global_index":465},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:35,481","timestamp_epoch":"2026-07-19 16:34:35,481","call_order":467,"extraction_index":469,"global_index":466},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:36,496","timestamp_epoch":"2026-07-19 16:34:36,496","call_order":468,"extraction_index":470,"global_index":467},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:36,496","timestamp_epoch":"2026-07-19 16:34:36,496","call_order":469,"extraction_index":471,"global_index":468},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:36,512","timestamp_epoch":"2026-07-19 16:34:36,512","call_order":470,"extraction_index":472,"global_index":469},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:36,512","timestamp_epoch":"2026-07-19 16:34:36,512","call_order":471,"extraction_index":473,"global_index":470},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:37,527","timestamp_epoch":"2026-07-19 16:34:37,527","call_order":472,"extraction_index":474,"global_index":471},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:37,527","timestamp_epoch":"2026-07-19 16:34:37,527","call_order":473,"extraction_index":475,"global_index":472},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:37,543","timestamp_epoch":"2026-07-19 16:34:37,543","call_order":474,"extraction_index":476,"global_index":473},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:37,543","timestamp_epoch":"2026-07-19 16:34:37,543","call_order":475,"extraction_index":477,"global_index":474},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:38,559","timestamp_epoch":"2026-07-19 16:34:38,559","call_order":476,"extraction_index":478,"global_index":475},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:38,559","timestamp_epoch":"2026-07-19 16:34:38,559","call_order":477,"extraction_index":479,"global_index":476},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:38,574","timestamp_epoch":"2026-07-19 16:34:38,574","call_order":478,"extraction_index":480,"global_index":477},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:38,574","timestamp_epoch":"2026-07-19 16:34:38,574","call_order":479,"extraction_index":481,"global_index":478},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:39,590","timestamp_epoch":"2026-07-19 16:34:39,590","call_order":480,"extraction_index":482,"global_index":479},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:39,590","timestamp_epoch":"2026-07-19 16:34:39,590","call_order":481,"extraction_index":483,"global_index":480},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:39,606","timestamp_epoch":"2026-07-19 16:34:39,606","call_order":482,"extraction_index":484,"global_index":481},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:39,606","timestamp_epoch":"2026-07-19 16:34:39,606","call_order":483,"extraction_index":485,"global_index":482},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:40,621","timestamp_epoch":"2026-07-19 16:34:40,621","call_order":484,"extraction_index":486,"global_index":483},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:40,621","timestamp_epoch":"2026-07-19 16:34:40,621","call_order":485,"extraction_index":487,"global_index":484},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:40,637","timestamp_epoch":"2026-07-19 16:34:40,637","call_order":486,"extraction_index":488,"global_index":485},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:40,637","timestamp_epoch":"2026-07-19 16:34:40,637","call_order":487,"extraction_index":489,"global_index":486},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:41,652","timestamp_epoch":"2026-07-19 16:34:41,652","call_order":488,"extraction_index":490,"global_index":487},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:41,652","timestamp_epoch":"2026-07-19 16:34:41,652","call_order":489,"extraction_index":491,"global_index":488},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:41,668","timestamp_epoch":"2026-07-19 16:34:41,668","call_order":490,"extraction_index":492,"global_index":489},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:41,668","timestamp_epoch":"2026-07-19 16:34:41,668","call_order":491,"extraction_index":493,"global_index":490},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:42,684","timestamp_epoch":"2026-07-19 16:34:42,684","call_order":492,"extraction_index":494,"global_index":491},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:42,684","timestamp_epoch":"2026-07-19 16:34:42,684","call_order":493,"extraction_index":495,"global_index":492},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:42,699","timestamp_epoch":"2026-07-19 16:34:42,699","call_order":494,"extraction_index":496,"global_index":493},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:42,699","timestamp_epoch":"2026-07-19 16:34:42,699","call_order":495,"extraction_index":497,"global_index":494},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:43,715","timestamp_epoch":"2026-07-19 16:34:43,715","call_order":496,"extraction_index":498,"global_index":495},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:43,715","timestamp_epoch":"2026-07-19 16:34:43,715","call_order":497,"extraction_index":499,"global_index":496},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:43,731","timestamp_epoch":"2026-07-19 16:34:43,731","call_order":498,"extraction_index":500,"global_index":497},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:43,731","timestamp_epoch":"2026-07-19 16:34:43,731","call_order":499,"extraction_index":501,"global_index":498},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:44,746","timestamp_epoch":"2026-07-19 16:34:44,746","call_order":500,"extraction_index":502,"global_index":499},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:44,746","timestamp_epoch":"2026-07-19 16:34:44,746","call_order":501,"extraction_index":503,"global_index":500},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:44,762","timestamp_epoch":"2026-07-19 16:34:44,762","call_order":502,"extraction_index":504,"global_index":501},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:44,762","timestamp_epoch":"2026-07-19 16:34:44,762","call_order":503,"extraction_index":505,"global_index":502},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:45,777","timestamp_epoch":"2026-07-19 16:34:45,777","call_order":504,"extraction_index":506,"global_index":503},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:45,777","timestamp_epoch":"2026-07-19 16:34:45,777","call_order":505,"extraction_index":507,"global_index":504},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:45,793","timestamp_epoch":"2026-07-19 16:34:45,793","call_order":506,"extraction_index":508,"global_index":505},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:45,793","timestamp_epoch":"2026-07-19 16:34:45,793","call_order":507,"extraction_index":509,"global_index":506},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:46,809","timestamp_epoch":"2026-07-19 16:34:46,809","call_order":508,"extraction_index":510,"global_index":507},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:46,809","timestamp_epoch":"2026-07-19 16:34:46,809","call_order":509,"extraction_index":511,"global_index":508},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:46,824","timestamp_epoch":"2026-07-19 16:34:46,824","call_order":510,"extraction_index":512,"global_index":509},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:46,824","timestamp_epoch":"2026-07-19 16:34:46,824","call_order":511,"extraction_index":513,"global_index":510},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:47,840","timestamp_epoch":"2026-07-19 16:34:47,840","call_order":512,"extraction_index":514,"global_index":511},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:47,840","timestamp_epoch":"2026-07-19 16:34:47,840","call_order":513,"extraction_index":515,"global_index":512},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:47,856","timestamp_epoch":"2026-07-19 16:34:47,856","call_order":514,"extraction_index":516,"global_index":513},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:47,856","timestamp_epoch":"2026-07-19 16:34:47,856","call_order":515,"extraction_index":517,"global_index":514},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:48,871","timestamp_epoch":"2026-07-19 16:34:48,871","call_order":516,"extraction_index":518,"global_index":515},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:48,871","timestamp_epoch":"2026-07-19 16:34:48,871","call_order":517,"extraction_index":519,"global_index":516},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:48,887","timestamp_epoch":"2026-07-19 16:34:48,887","call_order":518,"extraction_index":520,"global_index":517},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:48,887","timestamp_epoch":"2026-07-19 16:34:48,887","call_order":519,"extraction_index":521,"global_index":518},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:49,902","timestamp_epoch":"2026-07-19 16:34:49,902","call_order":520,"extraction_index":522,"global_index":519},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:49,902","timestamp_epoch":"2026-07-19 16:34:49,902","call_order":521,"extraction_index":523,"global_index":520},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:49,918","timestamp_epoch":"2026-07-19 16:34:49,918","call_order":522,"extraction_index":524,"global_index":521},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:49,918","timestamp_epoch":"2026-07-19 16:34:49,918","call_order":523,"extraction_index":525,"global_index":522},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:50,934","timestamp_epoch":"2026-07-19 16:34:50,934","call_order":524,"extraction_index":526,"global_index":523},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:50,934","timestamp_epoch":"2026-07-19 16:34:50,934","call_order":525,"extraction_index":527,"global_index":524},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:50,949","timestamp_epoch":"2026-07-19 16:34:50,949","call_order":526,"extraction_index":528,"global_index":525},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:50,949","timestamp_epoch":"2026-07-19 16:34:50,949","call_order":527,"extraction_index":529,"global_index":526},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:51,965","timestamp_epoch":"2026-07-19 16:34:51,965","call_order":528,"extraction_index":530,"global_index":527},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:51,965","timestamp_epoch":"2026-07-19 16:34:51,965","call_order":529,"extraction_index":531,"global_index":528},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:51,981","timestamp_epoch":"2026-07-19 16:34:51,981","call_order":530,"extraction_index":532,"global_index":529},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:51,981","timestamp_epoch":"2026-07-19 16:34:51,981","call_order":531,"extraction_index":533,"global_index":530},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:52,996","timestamp_epoch":"2026-07-19 16:34:52,996","call_order":532,"extraction_index":534,"global_index":531},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:52,996","timestamp_epoch":"2026-07-19 16:34:52,996","call_order":533,"extraction_index":535,"global_index":532},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:53,012","timestamp_epoch":"2026-07-19 16:34:53,012","call_order":534,"extraction_index":536,"global_index":533},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:53,012","timestamp_epoch":"2026-07-19 16:34:53,012","call_order":535,"extraction_index":537,"global_index":534},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:54,027","timestamp_epoch":"2026-07-19 16:34:54,027","call_order":536,"extraction_index":538,"global_index":535},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:54,027","timestamp_epoch":"2026-07-19 16:34:54,027","call_order":537,"extraction_index":539,"global_index":536},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:54,043","timestamp_epoch":"2026-07-19 16:34:54,043","call_order":538,"extraction_index":540,"global_index":537},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:54,043","timestamp_epoch":"2026-07-19 16:34:54,043","call_order":539,"extraction_index":541,"global_index":538},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:55,059","timestamp_epoch":"2026-07-19 16:34:55,059","call_order":540,"extraction_index":542,"global_index":539},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:55,059","timestamp_epoch":"2026-07-19 16:34:55,059","call_order":541,"extraction_index":543,"global_index":540},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:55,074","timestamp_epoch":"2026-07-19 16:34:55,074","call_order":542,"extraction_index":544,"global_index":541},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:55,074","timestamp_epoch":"2026-07-19 16:34:55,074","call_order":543,"extraction_index":545,"global_index":542},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:56,090","timestamp_epoch":"2026-07-19 16:34:56,090","call_order":544,"extraction_index":546,"global_index":543},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:56,090","timestamp_epoch":"2026-07-19 16:34:56,090","call_order":545,"extraction_index":547,"global_index":544},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:56,106","timestamp_epoch":"2026-07-19 16:34:56,106","call_order":546,"extraction_index":548,"global_index":545},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:56,106","timestamp_epoch":"2026-07-19 16:34:56,106","call_order":547,"extraction_index":549,"global_index":546},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:57,121","timestamp_epoch":"2026-07-19 16:34:57,121","call_order":548,"extraction_index":550,"global_index":547},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:57,121","timestamp_epoch":"2026-07-19 16:34:57,121","call_order":549,"extraction_index":551,"global_index":548},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:57,137","timestamp_epoch":"2026-07-19 16:34:57,137","call_order":550,"extraction_index":552,"global_index":549},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:57,137","timestamp_epoch":"2026-07-19 16:34:57,137","call_order":551,"extraction_index":553,"global_index":550},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:58,152","timestamp_epoch":"2026-07-19 16:34:58,152","call_order":552,"extraction_index":554,"global_index":551},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:58,152","timestamp_epoch":"2026-07-19 16:34:58,152","call_order":553,"extraction_index":555,"global_index":552},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:58,168","timestamp_epoch":"2026-07-19 16:34:58,168","call_order":554,"extraction_index":556,"global_index":553},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:58,168","timestamp_epoch":"2026-07-19 16:34:58,168","call_order":555,"extraction_index":557,"global_index":554},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:59,184","timestamp_epoch":"2026-07-19 16:34:59,184","call_order":556,"extraction_index":558,"global_index":555},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:34:59,184","timestamp_epoch":"2026-07-19 16:34:59,184","call_order":557,"extraction_index":559,"global_index":556},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:34:59,199","timestamp_epoch":"2026-07-19 16:34:59,199","call_order":558,"extraction_index":560,"global_index":557},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:34:59,199","timestamp_epoch":"2026-07-19 16:34:59,199","call_order":559,"extraction_index":561,"global_index":558},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:00,215","timestamp_epoch":"2026-07-19 16:35:00,215","call_order":560,"extraction_index":562,"global_index":559},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:00,215","timestamp_epoch":"2026-07-19 16:35:00,215","call_order":561,"extraction_index":563,"global_index":560},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:00,231","timestamp_epoch":"2026-07-19 16:35:00,231","call_order":562,"extraction_index":564,"global_index":561},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:00,231","timestamp_epoch":"2026-07-19 16:35:00,231","call_order":563,"extraction_index":565,"global_index":562},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:01,246","timestamp_epoch":"2026-07-19 16:35:01,246","call_order":564,"extraction_index":566,"global_index":563},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:01,246","timestamp_epoch":"2026-07-19 16:35:01,246","call_order":565,"extraction_index":567,"global_index":564},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:01,262","timestamp_epoch":"2026-07-19 16:35:01,262","call_order":566,"extraction_index":568,"global_index":565},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:01,262","timestamp_epoch":"2026-07-19 16:35:01,262","call_order":567,"extraction_index":569,"global_index":566},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:02,277","timestamp_epoch":"2026-07-19 16:35:02,277","call_order":568,"extraction_index":570,"global_index":567},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:02,277","timestamp_epoch":"2026-07-19 16:35:02,277","call_order":569,"extraction_index":571,"global_index":568},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:02,293","timestamp_epoch":"2026-07-19 16:35:02,293","call_order":570,"extraction_index":572,"global_index":569},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:02,293","timestamp_epoch":"2026-07-19 16:35:02,293","call_order":571,"extraction_index":573,"global_index":570},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:03,309","timestamp_epoch":"2026-07-19 16:35:03,309","call_order":572,"extraction_index":574,"global_index":571},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:03,309","timestamp_epoch":"2026-07-19 16:35:03,309","call_order":573,"extraction_index":575,"global_index":572},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:03,324","timestamp_epoch":"2026-07-19 16:35:03,324","call_order":574,"extraction_index":576,"global_index":573},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:03,324","timestamp_epoch":"2026-07-19 16:35:03,324","call_order":575,"extraction_index":577,"global_index":574},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:04,340","timestamp_epoch":"2026-07-19 16:35:04,340","call_order":576,"extraction_index":578,"global_index":575},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:04,340","timestamp_epoch":"2026-07-19 16:35:04,340","call_order":577,"extraction_index":579,"global_index":576},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:04,356","timestamp_epoch":"2026-07-19 16:35:04,356","call_order":578,"extraction_index":580,"global_index":577},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:04,356","timestamp_epoch":"2026-07-19 16:35:04,356","call_order":579,"extraction_index":581,"global_index":578},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:05,371","timestamp_epoch":"2026-07-19 16:35:05,371","call_order":580,"extraction_index":582,"global_index":579},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:05,371","timestamp_epoch":"2026-07-19 16:35:05,371","call_order":581,"extraction_index":583,"global_index":580},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:05,387","timestamp_epoch":"2026-07-19 16:35:05,387","call_order":582,"extraction_index":584,"global_index":581},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:05,387","timestamp_epoch":"2026-07-19 16:35:05,387","call_order":583,"extraction_index":585,"global_index":582},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:06,402","timestamp_epoch":"2026-07-19 16:35:06,402","call_order":584,"extraction_index":586,"global_index":583},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:06,402","timestamp_epoch":"2026-07-19 16:35:06,402","call_order":585,"extraction_index":587,"global_index":584},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:06,418","timestamp_epoch":"2026-07-19 16:35:06,418","call_order":586,"extraction_index":588,"global_index":585},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:06,418","timestamp_epoch":"2026-07-19 16:35:06,418","call_order":587,"extraction_index":589,"global_index":586},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:07,434","timestamp_epoch":"2026-07-19 16:35:07,434","call_order":588,"extraction_index":590,"global_index":587},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:07,434","timestamp_epoch":"2026-07-19 16:35:07,434","call_order":589,"extraction_index":591,"global_index":588},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:07,449","timestamp_epoch":"2026-07-19 16:35:07,449","call_order":590,"extraction_index":592,"global_index":589},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:07,449","timestamp_epoch":"2026-07-19 16:35:07,449","call_order":591,"extraction_index":593,"global_index":590},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:08,465","timestamp_epoch":"2026-07-19 16:35:08,465","call_order":592,"extraction_index":594,"global_index":591},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:08,465","timestamp_epoch":"2026-07-19 16:35:08,465","call_order":593,"extraction_index":595,"global_index":592},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:08,481","timestamp_epoch":"2026-07-19 16:35:08,481","call_order":594,"extraction_index":596,"global_index":593},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:08,481","timestamp_epoch":"2026-07-19 16:35:08,481","call_order":595,"extraction_index":597,"global_index":594},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:09,496","timestamp_epoch":"2026-07-19 16:35:09,496","call_order":596,"extraction_index":598,"global_index":595},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:09,496","timestamp_epoch":"2026-07-19 16:35:09,496","call_order":597,"extraction_index":599,"global_index":596},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:09,512","timestamp_epoch":"2026-07-19 16:35:09,512","call_order":598,"extraction_index":600,"global_index":597},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:09,512","timestamp_epoch":"2026-07-19 16:35:09,512","call_order":599,"extraction_index":601,"global_index":598},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:10,527","timestamp_epoch":"2026-07-19 16:35:10,527","call_order":600,"extraction_index":602,"global_index":599},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:10,527","timestamp_epoch":"2026-07-19 16:35:10,527","call_order":601,"extraction_index":603,"global_index":600},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:10,543","timestamp_epoch":"2026-07-19 16:35:10,543","call_order":602,"extraction_index":604,"global_index":601},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:10,543","timestamp_epoch":"2026-07-19 16:35:10,543","call_order":603,"extraction_index":605,"global_index":602},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:11,559","timestamp_epoch":"2026-07-19 16:35:11,559","call_order":604,"extraction_index":606,"global_index":603},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:11,559","timestamp_epoch":"2026-07-19 16:35:11,559","call_order":605,"extraction_index":607,"global_index":604},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:11,574","timestamp_epoch":"2026-07-19 16:35:11,574","call_order":606,"extraction_index":608,"global_index":605},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:11,574","timestamp_epoch":"2026-07-19 16:35:11,574","call_order":607,"extraction_index":609,"global_index":606},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:12,590","timestamp_epoch":"2026-07-19 16:35:12,590","call_order":608,"extraction_index":610,"global_index":607},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:12,590","timestamp_epoch":"2026-07-19 16:35:12,590","call_order":609,"extraction_index":611,"global_index":608},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:12,606","timestamp_epoch":"2026-07-19 16:35:12,606","call_order":610,"extraction_index":612,"global_index":609},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:12,606","timestamp_epoch":"2026-07-19 16:35:12,606","call_order":611,"extraction_index":613,"global_index":610},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:13,621","timestamp_epoch":"2026-07-19 16:35:13,621","call_order":612,"extraction_index":614,"global_index":611},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:13,621","timestamp_epoch":"2026-07-19 16:35:13,621","call_order":613,"extraction_index":615,"global_index":612},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:13,637","timestamp_epoch":"2026-07-19 16:35:13,637","call_order":614,"extraction_index":616,"global_index":613},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:13,637","timestamp_epoch":"2026-07-19 16:35:13,637","call_order":615,"extraction_index":617,"global_index":614},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:14,652","timestamp_epoch":"2026-07-19 16:35:14,652","call_order":616,"extraction_index":618,"global_index":615},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:14,652","timestamp_epoch":"2026-07-19 16:35:14,652","call_order":617,"extraction_index":619,"global_index":616},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:14,668","timestamp_epoch":"2026-07-19 16:35:14,668","call_order":618,"extraction_index":620,"global_index":617},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:14,668","timestamp_epoch":"2026-07-19 16:35:14,668","call_order":619,"extraction_index":621,"global_index":618},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:15,684","timestamp_epoch":"2026-07-19 16:35:15,684","call_order":620,"extraction_index":622,"global_index":619},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:15,684","timestamp_epoch":"2026-07-19 16:35:15,684","call_order":621,"extraction_index":623,"global_index":620},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:15,699","timestamp_epoch":"2026-07-19 16:35:15,699","call_order":622,"extraction_index":624,"global_index":621},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:15,699","timestamp_epoch":"2026-07-19 16:35:15,699","call_order":623,"extraction_index":625,"global_index":622},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:16,715","timestamp_epoch":"2026-07-19 16:35:16,715","call_order":624,"extraction_index":626,"global_index":623},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:16,715","timestamp_epoch":"2026-07-19 16:35:16,715","call_order":625,"extraction_index":627,"global_index":624},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:16,731","timestamp_epoch":"2026-07-19 16:35:16,731","call_order":626,"extraction_index":628,"global_index":625},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:16,731","timestamp_epoch":"2026-07-19 16:35:16,731","call_order":627,"extraction_index":629,"global_index":626},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:17,746","timestamp_epoch":"2026-07-19 16:35:17,746","call_order":628,"extraction_index":630,"global_index":627},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:17,746","timestamp_epoch":"2026-07-19 16:35:17,746","call_order":629,"extraction_index":631,"global_index":628},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:17,762","timestamp_epoch":"2026-07-19 16:35:17,762","call_order":630,"extraction_index":632,"global_index":629},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:17,762","timestamp_epoch":"2026-07-19 16:35:17,762","call_order":631,"extraction_index":633,"global_index":630},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:18,777","timestamp_epoch":"2026-07-19 16:35:18,777","call_order":632,"extraction_index":634,"global_index":631},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:18,777","timestamp_epoch":"2026-07-19 16:35:18,777","call_order":633,"extraction_index":635,"global_index":632},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:18,793","timestamp_epoch":"2026-07-19 16:35:18,793","call_order":634,"extraction_index":636,"global_index":633},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:18,793","timestamp_epoch":"2026-07-19 16:35:18,793","call_order":635,"extraction_index":637,"global_index":634},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:19,809","timestamp_epoch":"2026-07-19 16:35:19,809","call_order":636,"extraction_index":638,"global_index":635},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:19,809","timestamp_epoch":"2026-07-19 16:35:19,809","call_order":637,"extraction_index":639,"global_index":636},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:19,824","timestamp_epoch":"2026-07-19 16:35:19,824","call_order":638,"extraction_index":640,"global_index":637},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:19,824","timestamp_epoch":"2026-07-19 16:35:19,824","call_order":639,"extraction_index":641,"global_index":638},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:20,840","timestamp_epoch":"2026-07-19 16:35:20,840","call_order":640,"extraction_index":642,"global_index":639},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:20,840","timestamp_epoch":"2026-07-19 16:35:20,840","call_order":641,"extraction_index":643,"global_index":640},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:20,856","timestamp_epoch":"2026-07-19 16:35:20,856","call_order":642,"extraction_index":644,"global_index":641},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:20,856","timestamp_epoch":"2026-07-19 16:35:20,856","call_order":643,"extraction_index":645,"global_index":642},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:21,871","timestamp_epoch":"2026-07-19 16:35:21,871","call_order":644,"extraction_index":646,"global_index":643},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:21,871","timestamp_epoch":"2026-07-19 16:35:21,871","call_order":645,"extraction_index":647,"global_index":644},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:21,887","timestamp_epoch":"2026-07-19 16:35:21,887","call_order":646,"extraction_index":648,"global_index":645},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:21,887","timestamp_epoch":"2026-07-19 16:35:21,887","call_order":647,"extraction_index":649,"global_index":646},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:22,902","timestamp_epoch":"2026-07-19 16:35:22,902","call_order":648,"extraction_index":650,"global_index":647},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:22,902","timestamp_epoch":"2026-07-19 16:35:22,902","call_order":649,"extraction_index":651,"global_index":648},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:22,918","timestamp_epoch":"2026-07-19 16:35:22,918","call_order":650,"extraction_index":652,"global_index":649},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:22,918","timestamp_epoch":"2026-07-19 16:35:22,918","call_order":651,"extraction_index":653,"global_index":650},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:23,934","timestamp_epoch":"2026-07-19 16:35:23,934","call_order":652,"extraction_index":654,"global_index":651},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:23,934","timestamp_epoch":"2026-07-19 16:35:23,934","call_order":653,"extraction_index":655,"global_index":652},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:23,949","timestamp_epoch":"2026-07-19 16:35:23,949","call_order":654,"extraction_index":656,"global_index":653},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:23,949","timestamp_epoch":"2026-07-19 16:35:23,949","call_order":655,"extraction_index":657,"global_index":654},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:24,965","timestamp_epoch":"2026-07-19 16:35:24,965","call_order":656,"extraction_index":658,"global_index":655},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:24,965","timestamp_epoch":"2026-07-19 16:35:24,965","call_order":657,"extraction_index":659,"global_index":656},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:24,981","timestamp_epoch":"2026-07-19 16:35:24,981","call_order":658,"extraction_index":660,"global_index":657},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:24,981","timestamp_epoch":"2026-07-19 16:35:24,981","call_order":659,"extraction_index":661,"global_index":658},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:25,996","timestamp_epoch":"2026-07-19 16:35:25,996","call_order":660,"extraction_index":662,"global_index":659},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:25,996","timestamp_epoch":"2026-07-19 16:35:25,996","call_order":661,"extraction_index":663,"global_index":660},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:26,012","timestamp_epoch":"2026-07-19 16:35:26,012","call_order":662,"extraction_index":664,"global_index":661},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:26,012","timestamp_epoch":"2026-07-19 16:35:26,012","call_order":663,"extraction_index":665,"global_index":662},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:27,027","timestamp_epoch":"2026-07-19 16:35:27,027","call_order":664,"extraction_index":666,"global_index":663},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:27,027","timestamp_epoch":"2026-07-19 16:35:27,027","call_order":665,"extraction_index":667,"global_index":664},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:27,043","timestamp_epoch":"2026-07-19 16:35:27,043","call_order":666,"extraction_index":668,"global_index":665},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:27,043","timestamp_epoch":"2026-07-19 16:35:27,043","call_order":667,"extraction_index":669,"global_index":666},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:28,059","timestamp_epoch":"2026-07-19 16:35:28,059","call_order":668,"extraction_index":670,"global_index":667},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:28,059","timestamp_epoch":"2026-07-19 16:35:28,059","call_order":669,"extraction_index":671,"global_index":668},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:28,074","timestamp_epoch":"2026-07-19 16:35:28,074","call_order":670,"extraction_index":672,"global_index":669},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:28,074","timestamp_epoch":"2026-07-19 16:35:28,074","call_order":671,"extraction_index":673,"global_index":670},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:29,090","timestamp_epoch":"2026-07-19 16:35:29,090","call_order":672,"extraction_index":674,"global_index":671},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:29,090","timestamp_epoch":"2026-07-19 16:35:29,090","call_order":673,"extraction_index":675,"global_index":672},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:29,106","timestamp_epoch":"2026-07-19 16:35:29,106","call_order":674,"extraction_index":676,"global_index":673},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:29,106","timestamp_epoch":"2026-07-19 16:35:29,106","call_order":675,"extraction_index":677,"global_index":674},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:30,121","timestamp_epoch":"2026-07-19 16:35:30,121","call_order":676,"extraction_index":678,"global_index":675},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:30,121","timestamp_epoch":"2026-07-19 16:35:30,121","call_order":677,"extraction_index":679,"global_index":676},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:30,137","timestamp_epoch":"2026-07-19 16:35:30,137","call_order":678,"extraction_index":680,"global_index":677},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:30,137","timestamp_epoch":"2026-07-19 16:35:30,137","call_order":679,"extraction_index":681,"global_index":678},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:31,152","timestamp_epoch":"2026-07-19 16:35:31,152","call_order":680,"extraction_index":682,"global_index":679},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:31,152","timestamp_epoch":"2026-07-19 16:35:31,152","call_order":681,"extraction_index":683,"global_index":680},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:31,168","timestamp_epoch":"2026-07-19 16:35:31,168","call_order":682,"extraction_index":684,"global_index":681},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:31,168","timestamp_epoch":"2026-07-19 16:35:31,168","call_order":683,"extraction_index":685,"global_index":682},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:32,184","timestamp_epoch":"2026-07-19 16:35:32,184","call_order":684,"extraction_index":686,"global_index":683},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:32,184","timestamp_epoch":"2026-07-19 16:35:32,184","call_order":685,"extraction_index":687,"global_index":684},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:32,199","timestamp_epoch":"2026-07-19 16:35:32,199","call_order":686,"extraction_index":688,"global_index":685},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:32,199","timestamp_epoch":"2026-07-19 16:35:32,199","call_order":687,"extraction_index":689,"global_index":686},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:33,215","timestamp_epoch":"2026-07-19 16:35:33,215","call_order":688,"extraction_index":690,"global_index":687},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:33,215","timestamp_epoch":"2026-07-19 16:35:33,215","call_order":689,"extraction_index":691,"global_index":688},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:33,231","timestamp_epoch":"2026-07-19 16:35:33,231","call_order":690,"extraction_index":692,"global_index":689},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:33,231","timestamp_epoch":"2026-07-19 16:35:33,231","call_order":691,"extraction_index":693,"global_index":690},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:34,246","timestamp_epoch":"2026-07-19 16:35:34,246","call_order":692,"extraction_index":694,"global_index":691},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:34,246","timestamp_epoch":"2026-07-19 16:35:34,246","call_order":693,"extraction_index":695,"global_index":692},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:34,262","timestamp_epoch":"2026-07-19 16:35:34,262","call_order":694,"extraction_index":696,"global_index":693},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:34,262","timestamp_epoch":"2026-07-19 16:35:34,262","call_order":695,"extraction_index":697,"global_index":694},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:35,277","timestamp_epoch":"2026-07-19 16:35:35,277","call_order":696,"extraction_index":698,"global_index":695},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:35,277","timestamp_epoch":"2026-07-19 16:35:35,277","call_order":697,"extraction_index":699,"global_index":696},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:35,293","timestamp_epoch":"2026-07-19 16:35:35,293","call_order":698,"extraction_index":700,"global_index":697},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:35,293","timestamp_epoch":"2026-07-19 16:35:35,293","call_order":699,"extraction_index":701,"global_index":698},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:36,309","timestamp_epoch":"2026-07-19 16:35:36,309","call_order":700,"extraction_index":702,"global_index":699},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:36,309","timestamp_epoch":"2026-07-19 16:35:36,309","call_order":701,"extraction_index":703,"global_index":700},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:36,324","timestamp_epoch":"2026-07-19 16:35:36,324","call_order":702,"extraction_index":704,"global_index":701},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:36,324","timestamp_epoch":"2026-07-19 16:35:36,324","call_order":703,"extraction_index":705,"global_index":702},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:37,340","timestamp_epoch":"2026-07-19 16:35:37,340","call_order":704,"extraction_index":706,"global_index":703},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:37,340","timestamp_epoch":"2026-07-19 16:35:37,340","call_order":705,"extraction_index":707,"global_index":704},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:37,356","timestamp_epoch":"2026-07-19 16:35:37,356","call_order":706,"extraction_index":708,"global_index":705},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:37,356","timestamp_epoch":"2026-07-19 16:35:37,356","call_order":707,"extraction_index":709,"global_index":706},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:38,371","timestamp_epoch":"2026-07-19 16:35:38,371","call_order":708,"extraction_index":710,"global_index":707},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:38,371","timestamp_epoch":"2026-07-19 16:35:38,371","call_order":709,"extraction_index":711,"global_index":708},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:38,387","timestamp_epoch":"2026-07-19 16:35:38,387","call_order":710,"extraction_index":712,"global_index":709},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:38,387","timestamp_epoch":"2026-07-19 16:35:38,387","call_order":711,"extraction_index":713,"global_index":710},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:39,402","timestamp_epoch":"2026-07-19 16:35:39,402","call_order":712,"extraction_index":714,"global_index":711},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:39,402","timestamp_epoch":"2026-07-19 16:35:39,402","call_order":713,"extraction_index":715,"global_index":712},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:39,418","timestamp_epoch":"2026-07-19 16:35:39,418","call_order":714,"extraction_index":716,"global_index":713},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:39,418","timestamp_epoch":"2026-07-19 16:35:39,418","call_order":715,"extraction_index":717,"global_index":714},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:40,434","timestamp_epoch":"2026-07-19 16:35:40,434","call_order":716,"extraction_index":718,"global_index":715},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:40,434","timestamp_epoch":"2026-07-19 16:35:40,434","call_order":717,"extraction_index":719,"global_index":716},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:40,449","timestamp_epoch":"2026-07-19 16:35:40,449","call_order":718,"extraction_index":720,"global_index":717},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:40,449","timestamp_epoch":"2026-07-19 16:35:40,449","call_order":719,"extraction_index":721,"global_index":718},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:41,465","timestamp_epoch":"2026-07-19 16:35:41,465","call_order":720,"extraction_index":722,"global_index":719},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:41,465","timestamp_epoch":"2026-07-19 16:35:41,465","call_order":721,"extraction_index":723,"global_index":720},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:41,481","timestamp_epoch":"2026-07-19 16:35:41,481","call_order":722,"extraction_index":724,"global_index":721},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:41,481","timestamp_epoch":"2026-07-19 16:35:41,481","call_order":723,"extraction_index":725,"global_index":722},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:42,496","timestamp_epoch":"2026-07-19 16:35:42,496","call_order":724,"extraction_index":726,"global_index":723},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:42,496","timestamp_epoch":"2026-07-19 16:35:42,496","call_order":725,"extraction_index":727,"global_index":724},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:42,512","timestamp_epoch":"2026-07-19 16:35:42,512","call_order":726,"extraction_index":728,"global_index":725},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:42,512","timestamp_epoch":"2026-07-19 16:35:42,512","call_order":727,"extraction_index":729,"global_index":726},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:43,527","timestamp_epoch":"2026-07-19 16:35:43,527","call_order":728,"extraction_index":730,"global_index":727},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:43,527","timestamp_epoch":"2026-07-19 16:35:43,527","call_order":729,"extraction_index":731,"global_index":728},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:43,543","timestamp_epoch":"2026-07-19 16:35:43,543","call_order":730,"extraction_index":732,"global_index":729},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:43,543","timestamp_epoch":"2026-07-19 16:35:43,543","call_order":731,"extraction_index":733,"global_index":730},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:44,559","timestamp_epoch":"2026-07-19 16:35:44,559","call_order":732,"extraction_index":734,"global_index":731},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:44,559","timestamp_epoch":"2026-07-19 16:35:44,559","call_order":733,"extraction_index":735,"global_index":732},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:44,574","timestamp_epoch":"2026-07-19 16:35:44,574","call_order":734,"extraction_index":736,"global_index":733},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:44,574","timestamp_epoch":"2026-07-19 16:35:44,574","call_order":735,"extraction_index":737,"global_index":734},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:45,590","timestamp_epoch":"2026-07-19 16:35:45,590","call_order":736,"extraction_index":738,"global_index":735},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:45,590","timestamp_epoch":"2026-07-19 16:35:45,590","call_order":737,"extraction_index":739,"global_index":736},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:45,606","timestamp_epoch":"2026-07-19 16:35:45,606","call_order":738,"extraction_index":740,"global_index":737},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:45,606","timestamp_epoch":"2026-07-19 16:35:45,606","call_order":739,"extraction_index":741,"global_index":738},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:46,621","timestamp_epoch":"2026-07-19 16:35:46,621","call_order":740,"extraction_index":742,"global_index":739},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:46,621","timestamp_epoch":"2026-07-19 16:35:46,621","call_order":741,"extraction_index":743,"global_index":740},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:46,637","timestamp_epoch":"2026-07-19 16:35:46,637","call_order":742,"extraction_index":744,"global_index":741},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:46,637","timestamp_epoch":"2026-07-19 16:35:46,637","call_order":743,"extraction_index":745,"global_index":742},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:47,652","timestamp_epoch":"2026-07-19 16:35:47,652","call_order":744,"extraction_index":746,"global_index":743},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:47,652","timestamp_epoch":"2026-07-19 16:35:47,652","call_order":745,"extraction_index":747,"global_index":744},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:47,668","timestamp_epoch":"2026-07-19 16:35:47,668","call_order":746,"extraction_index":748,"global_index":745},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:47,668","timestamp_epoch":"2026-07-19 16:35:47,668","call_order":747,"extraction_index":749,"global_index":746},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:48,684","timestamp_epoch":"2026-07-19 16:35:48,684","call_order":748,"extraction_index":750,"global_index":747},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:48,684","timestamp_epoch":"2026-07-19 16:35:48,684","call_order":749,"extraction_index":751,"global_index":748},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:48,699","timestamp_epoch":"2026-07-19 16:35:48,699","call_order":750,"extraction_index":752,"global_index":749},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:48,699","timestamp_epoch":"2026-07-19 16:35:48,699","call_order":751,"extraction_index":753,"global_index":750},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:49,715","timestamp_epoch":"2026-07-19 16:35:49,715","call_order":752,"extraction_index":754,"global_index":751},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:49,715","timestamp_epoch":"2026-07-19 16:35:49,715","call_order":753,"extraction_index":755,"global_index":752},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:49,731","timestamp_epoch":"2026-07-19 16:35:49,731","call_order":754,"extraction_index":756,"global_index":753},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:49,731","timestamp_epoch":"2026-07-19 16:35:49,731","call_order":755,"extraction_index":757,"global_index":754},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:50,746","timestamp_epoch":"2026-07-19 16:35:50,746","call_order":756,"extraction_index":758,"global_index":755},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:50,746","timestamp_epoch":"2026-07-19 16:35:50,746","call_order":757,"extraction_index":759,"global_index":756},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:50,762","timestamp_epoch":"2026-07-19 16:35:50,762","call_order":758,"extraction_index":760,"global_index":757},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:50,762","timestamp_epoch":"2026-07-19 16:35:50,762","call_order":759,"extraction_index":761,"global_index":758},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:51,777","timestamp_epoch":"2026-07-19 16:35:51,777","call_order":760,"extraction_index":762,"global_index":759},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:51,777","timestamp_epoch":"2026-07-19 16:35:51,777","call_order":761,"extraction_index":763,"global_index":760},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:51,793","timestamp_epoch":"2026-07-19 16:35:51,793","call_order":762,"extraction_index":764,"global_index":761},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:51,793","timestamp_epoch":"2026-07-19 16:35:51,793","call_order":763,"extraction_index":765,"global_index":762},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:52,809","timestamp_epoch":"2026-07-19 16:35:52,809","call_order":764,"extraction_index":766,"global_index":763},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:52,809","timestamp_epoch":"2026-07-19 16:35:52,809","call_order":765,"extraction_index":767,"global_index":764},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:52,824","timestamp_epoch":"2026-07-19 16:35:52,824","call_order":766,"extraction_index":768,"global_index":765},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:52,824","timestamp_epoch":"2026-07-19 16:35:52,824","call_order":767,"extraction_index":769,"global_index":766},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:53,840","timestamp_epoch":"2026-07-19 16:35:53,840","call_order":768,"extraction_index":770,"global_index":767},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:53,840","timestamp_epoch":"2026-07-19 16:35:53,840","call_order":769,"extraction_index":771,"global_index":768},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:53,856","timestamp_epoch":"2026-07-19 16:35:53,856","call_order":770,"extraction_index":772,"global_index":769},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:53,856","timestamp_epoch":"2026-07-19 16:35:53,856","call_order":771,"extraction_index":773,"global_index":770},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:54,871","timestamp_epoch":"2026-07-19 16:35:54,871","call_order":772,"extraction_index":774,"global_index":771},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:54,871","timestamp_epoch":"2026-07-19 16:35:54,871","call_order":773,"extraction_index":775,"global_index":772},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:54,887","timestamp_epoch":"2026-07-19 16:35:54,887","call_order":774,"extraction_index":776,"global_index":773},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:54,887","timestamp_epoch":"2026-07-19 16:35:54,887","call_order":775,"extraction_index":777,"global_index":774},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:55,902","timestamp_epoch":"2026-07-19 16:35:55,902","call_order":776,"extraction_index":778,"global_index":775},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:55,902","timestamp_epoch":"2026-07-19 16:35:55,902","call_order":777,"extraction_index":779,"global_index":776},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:55,918","timestamp_epoch":"2026-07-19 16:35:55,918","call_order":778,"extraction_index":780,"global_index":777},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:55,918","timestamp_epoch":"2026-07-19 16:35:55,918","call_order":779,"extraction_index":781,"global_index":778},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:56,934","timestamp_epoch":"2026-07-19 16:35:56,934","call_order":780,"extraction_index":782,"global_index":779},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:56,934","timestamp_epoch":"2026-07-19 16:35:56,934","call_order":781,"extraction_index":783,"global_index":780},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:56,949","timestamp_epoch":"2026-07-19 16:35:56,949","call_order":782,"extraction_index":784,"global_index":781},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:56,949","timestamp_epoch":"2026-07-19 16:35:56,949","call_order":783,"extraction_index":785,"global_index":782},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:57,965","timestamp_epoch":"2026-07-19 16:35:57,965","call_order":784,"extraction_index":786,"global_index":783},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:57,965","timestamp_epoch":"2026-07-19 16:35:57,965","call_order":785,"extraction_index":787,"global_index":784},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:57,981","timestamp_epoch":"2026-07-19 16:35:57,981","call_order":786,"extraction_index":788,"global_index":785},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:57,981","timestamp_epoch":"2026-07-19 16:35:57,981","call_order":787,"extraction_index":789,"global_index":786},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:58,996","timestamp_epoch":"2026-07-19 16:35:58,996","call_order":788,"extraction_index":790,"global_index":787},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:35:58,996","timestamp_epoch":"2026-07-19 16:35:58,996","call_order":789,"extraction_index":791,"global_index":788},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:35:59,012","timestamp_epoch":"2026-07-19 16:35:59,012","call_order":790,"extraction_index":792,"global_index":789},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:35:59,012","timestamp_epoch":"2026-07-19 16:35:59,012","call_order":791,"extraction_index":793,"global_index":790},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:00,027","timestamp_epoch":"2026-07-19 16:36:00,027","call_order":792,"extraction_index":794,"global_index":791},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:00,027","timestamp_epoch":"2026-07-19 16:36:00,027","call_order":793,"extraction_index":795,"global_index":792},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:00,043","timestamp_epoch":"2026-07-19 16:36:00,043","call_order":794,"extraction_index":796,"global_index":793},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:00,043","timestamp_epoch":"2026-07-19 16:36:00,043","call_order":795,"extraction_index":797,"global_index":794},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:01,059","timestamp_epoch":"2026-07-19 16:36:01,059","call_order":796,"extraction_index":798,"global_index":795},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:01,059","timestamp_epoch":"2026-07-19 16:36:01,059","call_order":797,"extraction_index":799,"global_index":796},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:01,074","timestamp_epoch":"2026-07-19 16:36:01,074","call_order":798,"extraction_index":800,"global_index":797},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:01,074","timestamp_epoch":"2026-07-19 16:36:01,074","call_order":799,"extraction_index":801,"global_index":798},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:02,090","timestamp_epoch":"2026-07-19 16:36:02,090","call_order":800,"extraction_index":802,"global_index":799},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:02,090","timestamp_epoch":"2026-07-19 16:36:02,090","call_order":801,"extraction_index":803,"global_index":800},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:02,106","timestamp_epoch":"2026-07-19 16:36:02,106","call_order":802,"extraction_index":804,"global_index":801},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:02,106","timestamp_epoch":"2026-07-19 16:36:02,106","call_order":803,"extraction_index":805,"global_index":802},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:03,121","timestamp_epoch":"2026-07-19 16:36:03,121","call_order":804,"extraction_index":806,"global_index":803},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:03,121","timestamp_epoch":"2026-07-19 16:36:03,121","call_order":805,"extraction_index":807,"global_index":804},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:03,137","timestamp_epoch":"2026-07-19 16:36:03,137","call_order":806,"extraction_index":808,"global_index":805},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:03,137","timestamp_epoch":"2026-07-19 16:36:03,137","call_order":807,"extraction_index":809,"global_index":806},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:04,152","timestamp_epoch":"2026-07-19 16:36:04,152","call_order":808,"extraction_index":810,"global_index":807},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:04,152","timestamp_epoch":"2026-07-19 16:36:04,152","call_order":809,"extraction_index":811,"global_index":808},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:04,168","timestamp_epoch":"2026-07-19 16:36:04,168","call_order":810,"extraction_index":812,"global_index":809},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:04,168","timestamp_epoch":"2026-07-19 16:36:04,168","call_order":811,"extraction_index":813,"global_index":810},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:05,184","timestamp_epoch":"2026-07-19 16:36:05,184","call_order":812,"extraction_index":814,"global_index":811},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:05,184","timestamp_epoch":"2026-07-19 16:36:05,184","call_order":813,"extraction_index":815,"global_index":812},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:05,199","timestamp_epoch":"2026-07-19 16:36:05,199","call_order":814,"extraction_index":816,"global_index":813},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:05,199","timestamp_epoch":"2026-07-19 16:36:05,199","call_order":815,"extraction_index":817,"global_index":814},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:06,215","timestamp_epoch":"2026-07-19 16:36:06,215","call_order":816,"extraction_index":818,"global_index":815},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:06,215","timestamp_epoch":"2026-07-19 16:36:06,215","call_order":817,"extraction_index":819,"global_index":816},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:06,231","timestamp_epoch":"2026-07-19 16:36:06,231","call_order":818,"extraction_index":820,"global_index":817},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:06,231","timestamp_epoch":"2026-07-19 16:36:06,231","call_order":819,"extraction_index":821,"global_index":818},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:07,246","timestamp_epoch":"2026-07-19 16:36:07,246","call_order":820,"extraction_index":822,"global_index":819},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:07,246","timestamp_epoch":"2026-07-19 16:36:07,246","call_order":821,"extraction_index":823,"global_index":820},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:07,262","timestamp_epoch":"2026-07-19 16:36:07,262","call_order":822,"extraction_index":824,"global_index":821},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:07,262","timestamp_epoch":"2026-07-19 16:36:07,262","call_order":823,"extraction_index":825,"global_index":822},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:08,277","timestamp_epoch":"2026-07-19 16:36:08,277","call_order":824,"extraction_index":826,"global_index":823},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:08,277","timestamp_epoch":"2026-07-19 16:36:08,277","call_order":825,"extraction_index":827,"global_index":824},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:08,293","timestamp_epoch":"2026-07-19 16:36:08,293","call_order":826,"extraction_index":828,"global_index":825},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:08,293","timestamp_epoch":"2026-07-19 16:36:08,293","call_order":827,"extraction_index":829,"global_index":826},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:09,309","timestamp_epoch":"2026-07-19 16:36:09,309","call_order":828,"extraction_index":830,"global_index":827},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:09,309","timestamp_epoch":"2026-07-19 16:36:09,309","call_order":829,"extraction_index":831,"global_index":828},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:09,324","timestamp_epoch":"2026-07-19 16:36:09,324","call_order":830,"extraction_index":832,"global_index":829},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:09,324","timestamp_epoch":"2026-07-19 16:36:09,324","call_order":831,"extraction_index":833,"global_index":830},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:10,340","timestamp_epoch":"2026-07-19 16:36:10,340","call_order":832,"extraction_index":834,"global_index":831},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:10,340","timestamp_epoch":"2026-07-19 16:36:10,340","call_order":833,"extraction_index":835,"global_index":832},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:10,356","timestamp_epoch":"2026-07-19 16:36:10,356","call_order":834,"extraction_index":836,"global_index":833},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:10,356","timestamp_epoch":"2026-07-19 16:36:10,356","call_order":835,"extraction_index":837,"global_index":834},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:11,371","timestamp_epoch":"2026-07-19 16:36:11,371","call_order":836,"extraction_index":838,"global_index":835},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:11,371","timestamp_epoch":"2026-07-19 16:36:11,371","call_order":837,"extraction_index":839,"global_index":836},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:11,387","timestamp_epoch":"2026-07-19 16:36:11,387","call_order":838,"extraction_index":840,"global_index":837},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:11,387","timestamp_epoch":"2026-07-19 16:36:11,387","call_order":839,"extraction_index":841,"global_index":838},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:12,402","timestamp_epoch":"2026-07-19 16:36:12,402","call_order":840,"extraction_index":842,"global_index":839},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:12,402","timestamp_epoch":"2026-07-19 16:36:12,402","call_order":841,"extraction_index":843,"global_index":840},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:12,418","timestamp_epoch":"2026-07-19 16:36:12,418","call_order":842,"extraction_index":844,"global_index":841},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:12,418","timestamp_epoch":"2026-07-19 16:36:12,418","call_order":843,"extraction_index":845,"global_index":842},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:13,434","timestamp_epoch":"2026-07-19 16:36:13,434","call_order":844,"extraction_index":846,"global_index":843},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:13,434","timestamp_epoch":"2026-07-19 16:36:13,434","call_order":845,"extraction_index":847,"global_index":844},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:13,449","timestamp_epoch":"2026-07-19 16:36:13,449","call_order":846,"extraction_index":848,"global_index":845},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:13,449","timestamp_epoch":"2026-07-19 16:36:13,449","call_order":847,"extraction_index":849,"global_index":846},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:14,465","timestamp_epoch":"2026-07-19 16:36:14,465","call_order":848,"extraction_index":850,"global_index":847},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:14,465","timestamp_epoch":"2026-07-19 16:36:14,465","call_order":849,"extraction_index":851,"global_index":848},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:14,481","timestamp_epoch":"2026-07-19 16:36:14,481","call_order":850,"extraction_index":852,"global_index":849},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:14,481","timestamp_epoch":"2026-07-19 16:36:14,481","call_order":851,"extraction_index":853,"global_index":850},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:15,496","timestamp_epoch":"2026-07-19 16:36:15,496","call_order":852,"extraction_index":854,"global_index":851},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:15,496","timestamp_epoch":"2026-07-19 16:36:15,496","call_order":853,"extraction_index":855,"global_index":852},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:15,512","timestamp_epoch":"2026-07-19 16:36:15,512","call_order":854,"extraction_index":856,"global_index":853},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:15,512","timestamp_epoch":"2026-07-19 16:36:15,512","call_order":855,"extraction_index":857,"global_index":854},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtTestAlert","category":"threading","status":true,"return_value":null,"repeated":0,"arguments":[],"timestamp":"2026-07-19 16:36:16,090","timestamp_epoch":"2026-07-19 16:36:16,090","call_order":856,"extraction_index":858,"global_index":855},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"RtlUserThreadStart","category":"threading","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"StartAddress","value":"0x00000000"},{"name":"Parameter","value":"0x00000000"}],"timestamp":"2026-07-19 16:36:16,090","timestamp_epoch":"2026-07-19 16:36:16,090","call_order":857,"extraction_index":859,"global_index":856},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:16,527","timestamp_epoch":"2026-07-19 16:36:16,527","call_order":858,"extraction_index":860,"global_index":857},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:16,527","timestamp_epoch":"2026-07-19 16:36:16,527","call_order":859,"extraction_index":861,"global_index":858},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:16,543","timestamp_epoch":"2026-07-19 16:36:16,543","call_order":860,"extraction_index":862,"global_index":859},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:16,543","timestamp_epoch":"2026-07-19 16:36:16,543","call_order":861,"extraction_index":863,"global_index":860},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:17,559","timestamp_epoch":"2026-07-19 16:36:17,559","call_order":862,"extraction_index":864,"global_index":861},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:17,559","timestamp_epoch":"2026-07-19 16:36:17,559","call_order":863,"extraction_index":865,"global_index":862},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:17,574","timestamp_epoch":"2026-07-19 16:36:17,574","call_order":864,"extraction_index":866,"global_index":863},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:17,574","timestamp_epoch":"2026-07-19 16:36:17,574","call_order":865,"extraction_index":867,"global_index":864},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:18,590","timestamp_epoch":"2026-07-19 16:36:18,590","call_order":866,"extraction_index":868,"global_index":865},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:18,590","timestamp_epoch":"2026-07-19 16:36:18,590","call_order":867,"extraction_index":869,"global_index":866},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:18,606","timestamp_epoch":"2026-07-19 16:36:18,606","call_order":868,"extraction_index":870,"global_index":867},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:18,606","timestamp_epoch":"2026-07-19 16:36:18,606","call_order":869,"extraction_index":871,"global_index":868},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:19,621","timestamp_epoch":"2026-07-19 16:36:19,621","call_order":870,"extraction_index":872,"global_index":869},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:19,621","timestamp_epoch":"2026-07-19 16:36:19,621","call_order":871,"extraction_index":873,"global_index":870},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:19,637","timestamp_epoch":"2026-07-19 16:36:19,637","call_order":872,"extraction_index":874,"global_index":871},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:19,637","timestamp_epoch":"2026-07-19 16:36:19,637","call_order":873,"extraction_index":875,"global_index":872},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:20,652","timestamp_epoch":"2026-07-19 16:36:20,652","call_order":874,"extraction_index":876,"global_index":873},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:20,652","timestamp_epoch":"2026-07-19 16:36:20,652","call_order":875,"extraction_index":877,"global_index":874},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:20,668","timestamp_epoch":"2026-07-19 16:36:20,668","call_order":876,"extraction_index":878,"global_index":875},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:20,668","timestamp_epoch":"2026-07-19 16:36:20,668","call_order":877,"extraction_index":879,"global_index":876},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:21,684","timestamp_epoch":"2026-07-19 16:36:21,684","call_order":878,"extraction_index":880,"global_index":877},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:21,684","timestamp_epoch":"2026-07-19 16:36:21,684","call_order":879,"extraction_index":881,"global_index":878},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:21,699","timestamp_epoch":"2026-07-19 16:36:21,699","call_order":880,"extraction_index":882,"global_index":879},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:21,699","timestamp_epoch":"2026-07-19 16:36:21,699","call_order":881,"extraction_index":883,"global_index":880},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:22,715","timestamp_epoch":"2026-07-19 16:36:22,715","call_order":882,"extraction_index":884,"global_index":881},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:22,715","timestamp_epoch":"2026-07-19 16:36:22,715","call_order":883,"extraction_index":885,"global_index":882},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:22,731","timestamp_epoch":"2026-07-19 16:36:22,731","call_order":884,"extraction_index":886,"global_index":883},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:22,731","timestamp_epoch":"2026-07-19 16:36:22,731","call_order":885,"extraction_index":887,"global_index":884},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:23,746","timestamp_epoch":"2026-07-19 16:36:23,746","call_order":886,"extraction_index":888,"global_index":885},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:23,746","timestamp_epoch":"2026-07-19 16:36:23,746","call_order":887,"extraction_index":889,"global_index":886},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:23,762","timestamp_epoch":"2026-07-19 16:36:23,762","call_order":888,"extraction_index":890,"global_index":887},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:23,762","timestamp_epoch":"2026-07-19 16:36:23,762","call_order":889,"extraction_index":891,"global_index":888},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:24,777","timestamp_epoch":"2026-07-19 16:36:24,777","call_order":890,"extraction_index":892,"global_index":889},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:24,777","timestamp_epoch":"2026-07-19 16:36:24,777","call_order":891,"extraction_index":893,"global_index":890},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:24,793","timestamp_epoch":"2026-07-19 16:36:24,793","call_order":892,"extraction_index":894,"global_index":891},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:24,793","timestamp_epoch":"2026-07-19 16:36:24,793","call_order":893,"extraction_index":895,"global_index":892},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:25,809","timestamp_epoch":"2026-07-19 16:36:25,809","call_order":894,"extraction_index":896,"global_index":893},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:25,809","timestamp_epoch":"2026-07-19 16:36:25,809","call_order":895,"extraction_index":897,"global_index":894},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:25,824","timestamp_epoch":"2026-07-19 16:36:25,824","call_order":896,"extraction_index":898,"global_index":895},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:25,824","timestamp_epoch":"2026-07-19 16:36:25,824","call_order":897,"extraction_index":899,"global_index":896},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:26,840","timestamp_epoch":"2026-07-19 16:36:26,840","call_order":898,"extraction_index":900,"global_index":897},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:26,840","timestamp_epoch":"2026-07-19 16:36:26,840","call_order":899,"extraction_index":901,"global_index":898},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:26,856","timestamp_epoch":"2026-07-19 16:36:26,856","call_order":900,"extraction_index":902,"global_index":899},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:26,856","timestamp_epoch":"2026-07-19 16:36:26,856","call_order":901,"extraction_index":903,"global_index":900},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:27,871","timestamp_epoch":"2026-07-19 16:36:27,871","call_order":902,"extraction_index":904,"global_index":901},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:27,871","timestamp_epoch":"2026-07-19 16:36:27,871","call_order":903,"extraction_index":905,"global_index":902},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:27,887","timestamp_epoch":"2026-07-19 16:36:27,887","call_order":904,"extraction_index":906,"global_index":903},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:27,887","timestamp_epoch":"2026-07-19 16:36:27,887","call_order":905,"extraction_index":907,"global_index":904},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:28,902","timestamp_epoch":"2026-07-19 16:36:28,902","call_order":906,"extraction_index":908,"global_index":905},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:28,902","timestamp_epoch":"2026-07-19 16:36:28,902","call_order":907,"extraction_index":909,"global_index":906},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:28,918","timestamp_epoch":"2026-07-19 16:36:28,918","call_order":908,"extraction_index":910,"global_index":907},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:28,918","timestamp_epoch":"2026-07-19 16:36:28,918","call_order":909,"extraction_index":911,"global_index":908},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:29,934","timestamp_epoch":"2026-07-19 16:36:29,934","call_order":910,"extraction_index":912,"global_index":909},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:29,934","timestamp_epoch":"2026-07-19 16:36:29,934","call_order":911,"extraction_index":913,"global_index":910},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:29,949","timestamp_epoch":"2026-07-19 16:36:29,949","call_order":912,"extraction_index":914,"global_index":911},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:29,949","timestamp_epoch":"2026-07-19 16:36:29,949","call_order":913,"extraction_index":915,"global_index":912},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:30,965","timestamp_epoch":"2026-07-19 16:36:30,965","call_order":914,"extraction_index":916,"global_index":913},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:30,965","timestamp_epoch":"2026-07-19 16:36:30,965","call_order":915,"extraction_index":917,"global_index":914},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:30,981","timestamp_epoch":"2026-07-19 16:36:30,981","call_order":916,"extraction_index":918,"global_index":915},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:30,981","timestamp_epoch":"2026-07-19 16:36:30,981","call_order":917,"extraction_index":919,"global_index":916},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:31,996","timestamp_epoch":"2026-07-19 16:36:31,996","call_order":918,"extraction_index":920,"global_index":917},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:31,996","timestamp_epoch":"2026-07-19 16:36:31,996","call_order":919,"extraction_index":921,"global_index":918},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:32,012","timestamp_epoch":"2026-07-19 16:36:32,012","call_order":920,"extraction_index":922,"global_index":919},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:32,012","timestamp_epoch":"2026-07-19 16:36:32,012","call_order":921,"extraction_index":923,"global_index":920},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:33,027","timestamp_epoch":"2026-07-19 16:36:33,027","call_order":922,"extraction_index":924,"global_index":921},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:33,027","timestamp_epoch":"2026-07-19 16:36:33,027","call_order":923,"extraction_index":925,"global_index":922},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:33,043","timestamp_epoch":"2026-07-19 16:36:33,043","call_order":924,"extraction_index":926,"global_index":923},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:33,043","timestamp_epoch":"2026-07-19 16:36:33,043","call_order":925,"extraction_index":927,"global_index":924},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:34,059","timestamp_epoch":"2026-07-19 16:36:34,059","call_order":926,"extraction_index":928,"global_index":925},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:34,059","timestamp_epoch":"2026-07-19 16:36:34,059","call_order":927,"extraction_index":929,"global_index":926},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:34,074","timestamp_epoch":"2026-07-19 16:36:34,074","call_order":928,"extraction_index":930,"global_index":927},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:34,074","timestamp_epoch":"2026-07-19 16:36:34,074","call_order":929,"extraction_index":931,"global_index":928},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:35,090","timestamp_epoch":"2026-07-19 16:36:35,090","call_order":930,"extraction_index":932,"global_index":929},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:35,090","timestamp_epoch":"2026-07-19 16:36:35,090","call_order":931,"extraction_index":933,"global_index":930},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:35,106","timestamp_epoch":"2026-07-19 16:36:35,106","call_order":932,"extraction_index":934,"global_index":931},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:35,106","timestamp_epoch":"2026-07-19 16:36:35,106","call_order":933,"extraction_index":935,"global_index":932},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:36,121","timestamp_epoch":"2026-07-19 16:36:36,121","call_order":934,"extraction_index":936,"global_index":933},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:36,121","timestamp_epoch":"2026-07-19 16:36:36,121","call_order":935,"extraction_index":937,"global_index":934},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:36,137","timestamp_epoch":"2026-07-19 16:36:36,137","call_order":936,"extraction_index":938,"global_index":935},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:36,137","timestamp_epoch":"2026-07-19 16:36:36,137","call_order":937,"extraction_index":939,"global_index":936},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:37,152","timestamp_epoch":"2026-07-19 16:36:37,152","call_order":938,"extraction_index":940,"global_index":937},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:37,152","timestamp_epoch":"2026-07-19 16:36:37,152","call_order":939,"extraction_index":941,"global_index":938},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:37,168","timestamp_epoch":"2026-07-19 16:36:37,168","call_order":940,"extraction_index":942,"global_index":939},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:37,168","timestamp_epoch":"2026-07-19 16:36:37,168","call_order":941,"extraction_index":943,"global_index":940},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:38,184","timestamp_epoch":"2026-07-19 16:36:38,184","call_order":942,"extraction_index":944,"global_index":941},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:38,184","timestamp_epoch":"2026-07-19 16:36:38,184","call_order":943,"extraction_index":945,"global_index":942},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:38,199","timestamp_epoch":"2026-07-19 16:36:38,199","call_order":944,"extraction_index":946,"global_index":943},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:38,199","timestamp_epoch":"2026-07-19 16:36:38,199","call_order":945,"extraction_index":947,"global_index":944},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:39,215","timestamp_epoch":"2026-07-19 16:36:39,215","call_order":946,"extraction_index":948,"global_index":945},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:39,215","timestamp_epoch":"2026-07-19 16:36:39,215","call_order":947,"extraction_index":949,"global_index":946},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:39,231","timestamp_epoch":"2026-07-19 16:36:39,231","call_order":948,"extraction_index":950,"global_index":947},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:39,231","timestamp_epoch":"2026-07-19 16:36:39,231","call_order":949,"extraction_index":951,"global_index":948},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:40,246","timestamp_epoch":"2026-07-19 16:36:40,246","call_order":950,"extraction_index":952,"global_index":949},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:40,246","timestamp_epoch":"2026-07-19 16:36:40,246","call_order":951,"extraction_index":953,"global_index":950},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:40,262","timestamp_epoch":"2026-07-19 16:36:40,262","call_order":952,"extraction_index":954,"global_index":951},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:40,262","timestamp_epoch":"2026-07-19 16:36:40,262","call_order":953,"extraction_index":955,"global_index":952},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:41,277","timestamp_epoch":"2026-07-19 16:36:41,277","call_order":954,"extraction_index":956,"global_index":953},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:41,277","timestamp_epoch":"2026-07-19 16:36:41,277","call_order":955,"extraction_index":957,"global_index":954},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:41,293","timestamp_epoch":"2026-07-19 16:36:41,293","call_order":956,"extraction_index":958,"global_index":955},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:41,293","timestamp_epoch":"2026-07-19 16:36:41,293","call_order":957,"extraction_index":959,"global_index":956},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:42,309","timestamp_epoch":"2026-07-19 16:36:42,309","call_order":958,"extraction_index":960,"global_index":957},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:42,309","timestamp_epoch":"2026-07-19 16:36:42,309","call_order":959,"extraction_index":961,"global_index":958},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:42,324","timestamp_epoch":"2026-07-19 16:36:42,324","call_order":960,"extraction_index":962,"global_index":959},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:42,324","timestamp_epoch":"2026-07-19 16:36:42,324","call_order":961,"extraction_index":963,"global_index":960},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:43,340","timestamp_epoch":"2026-07-19 16:36:43,340","call_order":962,"extraction_index":964,"global_index":961},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:43,340","timestamp_epoch":"2026-07-19 16:36:43,340","call_order":963,"extraction_index":965,"global_index":962},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:43,356","timestamp_epoch":"2026-07-19 16:36:43,356","call_order":964,"extraction_index":966,"global_index":963},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:43,356","timestamp_epoch":"2026-07-19 16:36:43,356","call_order":965,"extraction_index":967,"global_index":964},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:44,371","timestamp_epoch":"2026-07-19 16:36:44,371","call_order":966,"extraction_index":968,"global_index":965},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:44,371","timestamp_epoch":"2026-07-19 16:36:44,371","call_order":967,"extraction_index":969,"global_index":966},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:44,387","timestamp_epoch":"2026-07-19 16:36:44,387","call_order":968,"extraction_index":970,"global_index":967},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:44,387","timestamp_epoch":"2026-07-19 16:36:44,387","call_order":969,"extraction_index":971,"global_index":968},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:45,402","timestamp_epoch":"2026-07-19 16:36:45,402","call_order":970,"extraction_index":972,"global_index":969},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:45,402","timestamp_epoch":"2026-07-19 16:36:45,402","call_order":971,"extraction_index":973,"global_index":970},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:45,418","timestamp_epoch":"2026-07-19 16:36:45,418","call_order":972,"extraction_index":974,"global_index":971},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:45,418","timestamp_epoch":"2026-07-19 16:36:45,418","call_order":973,"extraction_index":975,"global_index":972},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:46,434","timestamp_epoch":"2026-07-19 16:36:46,434","call_order":974,"extraction_index":976,"global_index":973},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:46,434","timestamp_epoch":"2026-07-19 16:36:46,434","call_order":975,"extraction_index":977,"global_index":974},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:46,449","timestamp_epoch":"2026-07-19 16:36:46,449","call_order":976,"extraction_index":978,"global_index":975},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:46,449","timestamp_epoch":"2026-07-19 16:36:46,449","call_order":977,"extraction_index":979,"global_index":976},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:47,465","timestamp_epoch":"2026-07-19 16:36:47,465","call_order":978,"extraction_index":980,"global_index":977},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:47,465","timestamp_epoch":"2026-07-19 16:36:47,465","call_order":979,"extraction_index":981,"global_index":978},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:47,481","timestamp_epoch":"2026-07-19 16:36:47,481","call_order":980,"extraction_index":982,"global_index":979},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:47,481","timestamp_epoch":"2026-07-19 16:36:47,481","call_order":981,"extraction_index":983,"global_index":980},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:48,496","timestamp_epoch":"2026-07-19 16:36:48,496","call_order":982,"extraction_index":984,"global_index":981},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:48,496","timestamp_epoch":"2026-07-19 16:36:48,496","call_order":983,"extraction_index":985,"global_index":982},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:48,512","timestamp_epoch":"2026-07-19 16:36:48,512","call_order":984,"extraction_index":986,"global_index":983},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:48,512","timestamp_epoch":"2026-07-19 16:36:48,512","call_order":985,"extraction_index":987,"global_index":984},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:49,527","timestamp_epoch":"2026-07-19 16:36:49,527","call_order":986,"extraction_index":988,"global_index":985},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:49,527","timestamp_epoch":"2026-07-19 16:36:49,527","call_order":987,"extraction_index":989,"global_index":986},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:49,543","timestamp_epoch":"2026-07-19 16:36:49,543","call_order":988,"extraction_index":990,"global_index":987},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:49,543","timestamp_epoch":"2026-07-19 16:36:49,543","call_order":989,"extraction_index":991,"global_index":988},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:50,559","timestamp_epoch":"2026-07-19 16:36:50,559","call_order":990,"extraction_index":992,"global_index":989},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:50,559","timestamp_epoch":"2026-07-19 16:36:50,559","call_order":991,"extraction_index":993,"global_index":990},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:50,574","timestamp_epoch":"2026-07-19 16:36:50,574","call_order":992,"extraction_index":994,"global_index":991},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:50,574","timestamp_epoch":"2026-07-19 16:36:50,574","call_order":993,"extraction_index":995,"global_index":992},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:51,590","timestamp_epoch":"2026-07-19 16:36:51,590","call_order":994,"extraction_index":996,"global_index":993},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:51,590","timestamp_epoch":"2026-07-19 16:36:51,590","call_order":995,"extraction_index":997,"global_index":994},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:51,606","timestamp_epoch":"2026-07-19 16:36:51,606","call_order":996,"extraction_index":998,"global_index":995},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:51,606","timestamp_epoch":"2026-07-19 16:36:51,606","call_order":997,"extraction_index":999,"global_index":996},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:52,621","timestamp_epoch":"2026-07-19 16:36:52,621","call_order":998,"extraction_index":1000,"global_index":997},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:52,621","timestamp_epoch":"2026-07-19 16:36:52,621","call_order":999,"extraction_index":1001,"global_index":998},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:52,637","timestamp_epoch":"2026-07-19 16:36:52,637","call_order":1000,"extraction_index":1002,"global_index":999},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:52,637","timestamp_epoch":"2026-07-19 16:36:52,637","call_order":1001,"extraction_index":1003,"global_index":1000},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:53,652","timestamp_epoch":"2026-07-19 16:36:53,652","call_order":1002,"extraction_index":1004,"global_index":1001},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:53,652","timestamp_epoch":"2026-07-19 16:36:53,652","call_order":1003,"extraction_index":1005,"global_index":1002},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:53,668","timestamp_epoch":"2026-07-19 16:36:53,668","call_order":1004,"extraction_index":1006,"global_index":1003},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:53,668","timestamp_epoch":"2026-07-19 16:36:53,668","call_order":1005,"extraction_index":1007,"global_index":1004},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:54,684","timestamp_epoch":"2026-07-19 16:36:54,684","call_order":1006,"extraction_index":1008,"global_index":1005},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:54,684","timestamp_epoch":"2026-07-19 16:36:54,684","call_order":1007,"extraction_index":1009,"global_index":1006},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:54,699","timestamp_epoch":"2026-07-19 16:36:54,699","call_order":1008,"extraction_index":1010,"global_index":1007},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:54,699","timestamp_epoch":"2026-07-19 16:36:54,699","call_order":1009,"extraction_index":1011,"global_index":1008},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:55,715","timestamp_epoch":"2026-07-19 16:36:55,715","call_order":1010,"extraction_index":1012,"global_index":1009},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:55,715","timestamp_epoch":"2026-07-19 16:36:55,715","call_order":1011,"extraction_index":1013,"global_index":1010},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:55,731","timestamp_epoch":"2026-07-19 16:36:55,731","call_order":1012,"extraction_index":1014,"global_index":1011},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:55,731","timestamp_epoch":"2026-07-19 16:36:55,731","call_order":1013,"extraction_index":1015,"global_index":1012},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:56,746","timestamp_epoch":"2026-07-19 16:36:56,746","call_order":1014,"extraction_index":1016,"global_index":1013},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:56,746","timestamp_epoch":"2026-07-19 16:36:56,746","call_order":1015,"extraction_index":1017,"global_index":1014},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:56,762","timestamp_epoch":"2026-07-19 16:36:56,762","call_order":1016,"extraction_index":1018,"global_index":1015},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:56,762","timestamp_epoch":"2026-07-19 16:36:56,762","call_order":1017,"extraction_index":1019,"global_index":1016},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:57,777","timestamp_epoch":"2026-07-19 16:36:57,777","call_order":1018,"extraction_index":1020,"global_index":1017},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:57,777","timestamp_epoch":"2026-07-19 16:36:57,777","call_order":1019,"extraction_index":1021,"global_index":1018},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:57,793","timestamp_epoch":"2026-07-19 16:36:57,793","call_order":1020,"extraction_index":1022,"global_index":1019},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:57,793","timestamp_epoch":"2026-07-19 16:36:57,793","call_order":1021,"extraction_index":1023,"global_index":1020},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:58,809","timestamp_epoch":"2026-07-19 16:36:58,809","call_order":1022,"extraction_index":1024,"global_index":1021},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:58,809","timestamp_epoch":"2026-07-19 16:36:58,809","call_order":1023,"extraction_index":1025,"global_index":1022},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:58,824","timestamp_epoch":"2026-07-19 16:36:58,824","call_order":1024,"extraction_index":1026,"global_index":1023},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:58,824","timestamp_epoch":"2026-07-19 16:36:58,824","call_order":1025,"extraction_index":1027,"global_index":1024},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:59,840","timestamp_epoch":"2026-07-19 16:36:59,840","call_order":1026,"extraction_index":1028,"global_index":1025},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:36:59,840","timestamp_epoch":"2026-07-19 16:36:59,840","call_order":1027,"extraction_index":1029,"global_index":1026},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:36:59,856","timestamp_epoch":"2026-07-19 16:36:59,856","call_order":1028,"extraction_index":1030,"global_index":1027},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:36:59,856","timestamp_epoch":"2026-07-19 16:36:59,856","call_order":1029,"extraction_index":1031,"global_index":1028},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:00,871","timestamp_epoch":"2026-07-19 16:37:00,871","call_order":1030,"extraction_index":1032,"global_index":1029},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:00,871","timestamp_epoch":"2026-07-19 16:37:00,871","call_order":1031,"extraction_index":1033,"global_index":1030},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:00,887","timestamp_epoch":"2026-07-19 16:37:00,887","call_order":1032,"extraction_index":1034,"global_index":1031},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:00,887","timestamp_epoch":"2026-07-19 16:37:00,887","call_order":1033,"extraction_index":1035,"global_index":1032},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:01,902","timestamp_epoch":"2026-07-19 16:37:01,902","call_order":1034,"extraction_index":1036,"global_index":1033},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:01,902","timestamp_epoch":"2026-07-19 16:37:01,902","call_order":1035,"extraction_index":1037,"global_index":1034},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:01,918","timestamp_epoch":"2026-07-19 16:37:01,918","call_order":1036,"extraction_index":1038,"global_index":1035},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:01,918","timestamp_epoch":"2026-07-19 16:37:01,918","call_order":1037,"extraction_index":1039,"global_index":1036},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:02,934","timestamp_epoch":"2026-07-19 16:37:02,934","call_order":1038,"extraction_index":1040,"global_index":1037},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:02,934","timestamp_epoch":"2026-07-19 16:37:02,934","call_order":1039,"extraction_index":1041,"global_index":1038},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:02,949","timestamp_epoch":"2026-07-19 16:37:02,949","call_order":1040,"extraction_index":1042,"global_index":1039},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:02,949","timestamp_epoch":"2026-07-19 16:37:02,949","call_order":1041,"extraction_index":1043,"global_index":1040},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:03,965","timestamp_epoch":"2026-07-19 16:37:03,965","call_order":1042,"extraction_index":1044,"global_index":1041},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:03,965","timestamp_epoch":"2026-07-19 16:37:03,965","call_order":1043,"extraction_index":1045,"global_index":1042},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:03,981","timestamp_epoch":"2026-07-19 16:37:03,981","call_order":1044,"extraction_index":1046,"global_index":1043},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:03,981","timestamp_epoch":"2026-07-19 16:37:03,981","call_order":1045,"extraction_index":1047,"global_index":1044},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:04,996","timestamp_epoch":"2026-07-19 16:37:04,996","call_order":1046,"extraction_index":1048,"global_index":1045},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:04,996","timestamp_epoch":"2026-07-19 16:37:04,996","call_order":1047,"extraction_index":1049,"global_index":1046},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:05,012","timestamp_epoch":"2026-07-19 16:37:05,012","call_order":1048,"extraction_index":1050,"global_index":1047},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:05,012","timestamp_epoch":"2026-07-19 16:37:05,012","call_order":1049,"extraction_index":1051,"global_index":1048},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:06,027","timestamp_epoch":"2026-07-19 16:37:06,027","call_order":1050,"extraction_index":1052,"global_index":1049},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:06,027","timestamp_epoch":"2026-07-19 16:37:06,027","call_order":1051,"extraction_index":1053,"global_index":1050},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:06,043","timestamp_epoch":"2026-07-19 16:37:06,043","call_order":1052,"extraction_index":1054,"global_index":1051},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:06,043","timestamp_epoch":"2026-07-19 16:37:06,043","call_order":1053,"extraction_index":1055,"global_index":1052},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:07,059","timestamp_epoch":"2026-07-19 16:37:07,059","call_order":1054,"extraction_index":1056,"global_index":1053},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:07,059","timestamp_epoch":"2026-07-19 16:37:07,059","call_order":1055,"extraction_index":1057,"global_index":1054},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:07,074","timestamp_epoch":"2026-07-19 16:37:07,074","call_order":1056,"extraction_index":1058,"global_index":1055},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:07,074","timestamp_epoch":"2026-07-19 16:37:07,074","call_order":1057,"extraction_index":1059,"global_index":1056},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:08,090","timestamp_epoch":"2026-07-19 16:37:08,090","call_order":1058,"extraction_index":1060,"global_index":1057},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:08,090","timestamp_epoch":"2026-07-19 16:37:08,090","call_order":1059,"extraction_index":1061,"global_index":1058},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:08,106","timestamp_epoch":"2026-07-19 16:37:08,106","call_order":1060,"extraction_index":1062,"global_index":1059},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:08,106","timestamp_epoch":"2026-07-19 16:37:08,106","call_order":1061,"extraction_index":1063,"global_index":1060},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:09,121","timestamp_epoch":"2026-07-19 16:37:09,121","call_order":1062,"extraction_index":1064,"global_index":1061},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:09,121","timestamp_epoch":"2026-07-19 16:37:09,121","call_order":1063,"extraction_index":1065,"global_index":1062},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:09,137","timestamp_epoch":"2026-07-19 16:37:09,137","call_order":1064,"extraction_index":1066,"global_index":1063},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:09,137","timestamp_epoch":"2026-07-19 16:37:09,137","call_order":1065,"extraction_index":1067,"global_index":1064},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:10,152","timestamp_epoch":"2026-07-19 16:37:10,152","call_order":1066,"extraction_index":1068,"global_index":1065},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:10,152","timestamp_epoch":"2026-07-19 16:37:10,152","call_order":1067,"extraction_index":1069,"global_index":1066},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:10,168","timestamp_epoch":"2026-07-19 16:37:10,168","call_order":1068,"extraction_index":1070,"global_index":1067},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:10,168","timestamp_epoch":"2026-07-19 16:37:10,168","call_order":1069,"extraction_index":1071,"global_index":1068},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:11,184","timestamp_epoch":"2026-07-19 16:37:11,184","call_order":1070,"extraction_index":1072,"global_index":1069},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:11,184","timestamp_epoch":"2026-07-19 16:37:11,184","call_order":1071,"extraction_index":1073,"global_index":1070},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:11,199","timestamp_epoch":"2026-07-19 16:37:11,199","call_order":1072,"extraction_index":1074,"global_index":1071},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:11,199","timestamp_epoch":"2026-07-19 16:37:11,199","call_order":1073,"extraction_index":1075,"global_index":1072},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:12,215","timestamp_epoch":"2026-07-19 16:37:12,215","call_order":1074,"extraction_index":1076,"global_index":1073},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:12,215","timestamp_epoch":"2026-07-19 16:37:12,215","call_order":1075,"extraction_index":1077,"global_index":1074},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:12,231","timestamp_epoch":"2026-07-19 16:37:12,231","call_order":1076,"extraction_index":1078,"global_index":1075},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:12,231","timestamp_epoch":"2026-07-19 16:37:12,231","call_order":1077,"extraction_index":1079,"global_index":1076},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:13,246","timestamp_epoch":"2026-07-19 16:37:13,246","call_order":1078,"extraction_index":1080,"global_index":1077},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:13,246","timestamp_epoch":"2026-07-19 16:37:13,246","call_order":1079,"extraction_index":1081,"global_index":1078},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:13,262","timestamp_epoch":"2026-07-19 16:37:13,262","call_order":1080,"extraction_index":1082,"global_index":1079},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:13,262","timestamp_epoch":"2026-07-19 16:37:13,262","call_order":1081,"extraction_index":1083,"global_index":1080},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:14,277","timestamp_epoch":"2026-07-19 16:37:14,277","call_order":1082,"extraction_index":1084,"global_index":1081},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:14,277","timestamp_epoch":"2026-07-19 16:37:14,277","call_order":1083,"extraction_index":1085,"global_index":1082},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:14,293","timestamp_epoch":"2026-07-19 16:37:14,293","call_order":1084,"extraction_index":1086,"global_index":1083},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:14,293","timestamp_epoch":"2026-07-19 16:37:14,293","call_order":1085,"extraction_index":1087,"global_index":1084},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:15,309","timestamp_epoch":"2026-07-19 16:37:15,309","call_order":1086,"extraction_index":1088,"global_index":1085},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:15,309","timestamp_epoch":"2026-07-19 16:37:15,309","call_order":1087,"extraction_index":1089,"global_index":1086},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:15,324","timestamp_epoch":"2026-07-19 16:37:15,324","call_order":1088,"extraction_index":1090,"global_index":1087},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:15,324","timestamp_epoch":"2026-07-19 16:37:15,324","call_order":1089,"extraction_index":1091,"global_index":1088},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtMapViewOfSection","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"SectionHandle","value":"0x000002a0"},{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x007f0000"},{"name":"SectionOffset","value":"0x00000000"},{"name":"ViewSize","value":"0x00001000"},{"name":"Win32Protect","value":"0x00000002","pretty_value":"PAGE_READONLY"},{"name":"StackPivoted","value":"no"}],"timestamp":"2026-07-19 16:37:15,512","timestamp_epoch":"2026-07-19 16:37:15,512","call_order":1090,"extraction_index":1092,"global_index":1089},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtUnmapViewOfSection","category":"process","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"ProcessHandle","value":"0xffffffff"},{"name":"BaseAddress","value":"0x00750000"},{"name":"RegionSize","value":"0x00001000"}],"timestamp":"2026-07-19 16:37:15,512","timestamp_epoch":"2026-07-19 16:37:15,512","call_order":1091,"extraction_index":1093,"global_index":1090},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtClose","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Handle","value":"0x000002a0"}],"timestamp":"2026-07-19 16:37:15,512","timestamp_epoch":"2026-07-19 16:37:15,512","call_order":1092,"extraction_index":1094,"global_index":1091},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtTestAlert","category":"threading","status":true,"return_value":null,"repeated":0,"arguments":[],"timestamp":"2026-07-19 16:37:15,512","timestamp_epoch":"2026-07-19 16:37:15,512","call_order":1093,"extraction_index":1095,"global_index":1092},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"RtlUserThreadStart","category":"threading","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"StartAddress","value":"0x00000000"},{"name":"Parameter","value":"0x00000000"}],"timestamp":"2026-07-19 16:37:15,512","timestamp_epoch":"2026-07-19 16:37:15,512","call_order":1094,"extraction_index":1096,"global_index":1093},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:16,340","timestamp_epoch":"2026-07-19 16:37:16,340","call_order":1095,"extraction_index":1097,"global_index":1094},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:16,340","timestamp_epoch":"2026-07-19 16:37:16,340","call_order":1096,"extraction_index":1098,"global_index":1095},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:16,356","timestamp_epoch":"2026-07-19 16:37:16,356","call_order":1097,"extraction_index":1099,"global_index":1096},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:16,356","timestamp_epoch":"2026-07-19 16:37:16,356","call_order":1098,"extraction_index":1100,"global_index":1097},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:17,371","timestamp_epoch":"2026-07-19 16:37:17,371","call_order":1099,"extraction_index":1101,"global_index":1098},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:17,371","timestamp_epoch":"2026-07-19 16:37:17,371","call_order":1100,"extraction_index":1102,"global_index":1099},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:17,387","timestamp_epoch":"2026-07-19 16:37:17,387","call_order":1101,"extraction_index":1103,"global_index":1100},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:17,387","timestamp_epoch":"2026-07-19 16:37:17,387","call_order":1102,"extraction_index":1104,"global_index":1101},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:18,402","timestamp_epoch":"2026-07-19 16:37:18,402","call_order":1103,"extraction_index":1105,"global_index":1102},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:18,402","timestamp_epoch":"2026-07-19 16:37:18,402","call_order":1104,"extraction_index":1106,"global_index":1103},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:18,418","timestamp_epoch":"2026-07-19 16:37:18,418","call_order":1105,"extraction_index":1107,"global_index":1104},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:18,418","timestamp_epoch":"2026-07-19 16:37:18,418","call_order":1106,"extraction_index":1108,"global_index":1105},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:19,434","timestamp_epoch":"2026-07-19 16:37:19,434","call_order":1107,"extraction_index":1109,"global_index":1106},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:19,434","timestamp_epoch":"2026-07-19 16:37:19,434","call_order":1108,"extraction_index":1110,"global_index":1107},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:19,449","timestamp_epoch":"2026-07-19 16:37:19,449","call_order":1109,"extraction_index":1111,"global_index":1108},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:19,449","timestamp_epoch":"2026-07-19 16:37:19,449","call_order":1110,"extraction_index":1112,"global_index":1109},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:20,465","timestamp_epoch":"2026-07-19 16:37:20,465","call_order":1111,"extraction_index":1113,"global_index":1110},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:20,465","timestamp_epoch":"2026-07-19 16:37:20,465","call_order":1112,"extraction_index":1114,"global_index":1111},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:20,481","timestamp_epoch":"2026-07-19 16:37:20,481","call_order":1113,"extraction_index":1115,"global_index":1112},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:20,481","timestamp_epoch":"2026-07-19 16:37:20,481","call_order":1114,"extraction_index":1116,"global_index":1113},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:21,496","timestamp_epoch":"2026-07-19 16:37:21,496","call_order":1115,"extraction_index":1117,"global_index":1114},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:21,496","timestamp_epoch":"2026-07-19 16:37:21,496","call_order":1116,"extraction_index":1118,"global_index":1115},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:21,512","timestamp_epoch":"2026-07-19 16:37:21,512","call_order":1117,"extraction_index":1119,"global_index":1116},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:21,512","timestamp_epoch":"2026-07-19 16:37:21,512","call_order":1118,"extraction_index":1120,"global_index":1117},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:22,527","timestamp_epoch":"2026-07-19 16:37:22,527","call_order":1119,"extraction_index":1121,"global_index":1118},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:22,527","timestamp_epoch":"2026-07-19 16:37:22,527","call_order":1120,"extraction_index":1122,"global_index":1119},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:22,543","timestamp_epoch":"2026-07-19 16:37:22,543","call_order":1121,"extraction_index":1123,"global_index":1120},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:22,543","timestamp_epoch":"2026-07-19 16:37:22,543","call_order":1122,"extraction_index":1124,"global_index":1121},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:23,559","timestamp_epoch":"2026-07-19 16:37:23,559","call_order":1123,"extraction_index":1125,"global_index":1122},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:23,559","timestamp_epoch":"2026-07-19 16:37:23,559","call_order":1124,"extraction_index":1126,"global_index":1123},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:23,574","timestamp_epoch":"2026-07-19 16:37:23,574","call_order":1125,"extraction_index":1127,"global_index":1124},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:23,574","timestamp_epoch":"2026-07-19 16:37:23,574","call_order":1126,"extraction_index":1128,"global_index":1125},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:24,590","timestamp_epoch":"2026-07-19 16:37:24,590","call_order":1127,"extraction_index":1129,"global_index":1126},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:24,590","timestamp_epoch":"2026-07-19 16:37:24,590","call_order":1128,"extraction_index":1130,"global_index":1127},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:24,606","timestamp_epoch":"2026-07-19 16:37:24,606","call_order":1129,"extraction_index":1131,"global_index":1128},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:24,606","timestamp_epoch":"2026-07-19 16:37:24,606","call_order":1130,"extraction_index":1132,"global_index":1129},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:25,621","timestamp_epoch":"2026-07-19 16:37:25,621","call_order":1131,"extraction_index":1133,"global_index":1130},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:25,621","timestamp_epoch":"2026-07-19 16:37:25,621","call_order":1132,"extraction_index":1134,"global_index":1131},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:25,637","timestamp_epoch":"2026-07-19 16:37:25,637","call_order":1133,"extraction_index":1135,"global_index":1132},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:25,637","timestamp_epoch":"2026-07-19 16:37:25,637","call_order":1134,"extraction_index":1136,"global_index":1133},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:26,652","timestamp_epoch":"2026-07-19 16:37:26,652","call_order":1135,"extraction_index":1137,"global_index":1134},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:26,652","timestamp_epoch":"2026-07-19 16:37:26,652","call_order":1136,"extraction_index":1138,"global_index":1135},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:26,668","timestamp_epoch":"2026-07-19 16:37:26,668","call_order":1137,"extraction_index":1139,"global_index":1136},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:26,668","timestamp_epoch":"2026-07-19 16:37:26,668","call_order":1138,"extraction_index":1140,"global_index":1137},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:27,684","timestamp_epoch":"2026-07-19 16:37:27,684","call_order":1139,"extraction_index":1141,"global_index":1138},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:27,684","timestamp_epoch":"2026-07-19 16:37:27,684","call_order":1140,"extraction_index":1142,"global_index":1139},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:27,699","timestamp_epoch":"2026-07-19 16:37:27,699","call_order":1141,"extraction_index":1143,"global_index":1140},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:27,699","timestamp_epoch":"2026-07-19 16:37:27,699","call_order":1142,"extraction_index":1144,"global_index":1141},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:28,715","timestamp_epoch":"2026-07-19 16:37:28,715","call_order":1143,"extraction_index":1145,"global_index":1142},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:28,715","timestamp_epoch":"2026-07-19 16:37:28,715","call_order":1144,"extraction_index":1146,"global_index":1143},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:28,731","timestamp_epoch":"2026-07-19 16:37:28,731","call_order":1145,"extraction_index":1147,"global_index":1144},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:28,731","timestamp_epoch":"2026-07-19 16:37:28,731","call_order":1146,"extraction_index":1148,"global_index":1145},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:29,746","timestamp_epoch":"2026-07-19 16:37:29,746","call_order":1147,"extraction_index":1149,"global_index":1146},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:29,746","timestamp_epoch":"2026-07-19 16:37:29,746","call_order":1148,"extraction_index":1150,"global_index":1147},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:29,762","timestamp_epoch":"2026-07-19 16:37:29,762","call_order":1149,"extraction_index":1151,"global_index":1148},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:29,762","timestamp_epoch":"2026-07-19 16:37:29,762","call_order":1150,"extraction_index":1152,"global_index":1149},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:30,777","timestamp_epoch":"2026-07-19 16:37:30,777","call_order":1151,"extraction_index":1153,"global_index":1150},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:30,777","timestamp_epoch":"2026-07-19 16:37:30,777","call_order":1152,"extraction_index":1154,"global_index":1151},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:30,793","timestamp_epoch":"2026-07-19 16:37:30,793","call_order":1153,"extraction_index":1155,"global_index":1152},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:30,793","timestamp_epoch":"2026-07-19 16:37:30,793","call_order":1154,"extraction_index":1156,"global_index":1153},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:31,809","timestamp_epoch":"2026-07-19 16:37:31,809","call_order":1155,"extraction_index":1157,"global_index":1154},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:31,809","timestamp_epoch":"2026-07-19 16:37:31,809","call_order":1156,"extraction_index":1158,"global_index":1155},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:31,824","timestamp_epoch":"2026-07-19 16:37:31,824","call_order":1157,"extraction_index":1159,"global_index":1156},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:31,824","timestamp_epoch":"2026-07-19 16:37:31,824","call_order":1158,"extraction_index":1160,"global_index":1157},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:32,840","timestamp_epoch":"2026-07-19 16:37:32,840","call_order":1159,"extraction_index":1161,"global_index":1158},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:32,840","timestamp_epoch":"2026-07-19 16:37:32,840","call_order":1160,"extraction_index":1162,"global_index":1159},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:32,856","timestamp_epoch":"2026-07-19 16:37:32,856","call_order":1161,"extraction_index":1163,"global_index":1160},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:32,856","timestamp_epoch":"2026-07-19 16:37:32,856","call_order":1162,"extraction_index":1164,"global_index":1161},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:33,871","timestamp_epoch":"2026-07-19 16:37:33,871","call_order":1163,"extraction_index":1165,"global_index":1162},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:33,871","timestamp_epoch":"2026-07-19 16:37:33,871","call_order":1164,"extraction_index":1166,"global_index":1163},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:33,887","timestamp_epoch":"2026-07-19 16:37:33,887","call_order":1165,"extraction_index":1167,"global_index":1164},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:33,887","timestamp_epoch":"2026-07-19 16:37:33,887","call_order":1166,"extraction_index":1168,"global_index":1165},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:34,902","timestamp_epoch":"2026-07-19 16:37:34,902","call_order":1167,"extraction_index":1169,"global_index":1166},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:34,902","timestamp_epoch":"2026-07-19 16:37:34,902","call_order":1168,"extraction_index":1170,"global_index":1167},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:34,918","timestamp_epoch":"2026-07-19 16:37:34,918","call_order":1169,"extraction_index":1171,"global_index":1168},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:34,918","timestamp_epoch":"2026-07-19 16:37:34,918","call_order":1170,"extraction_index":1172,"global_index":1169},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:35,934","timestamp_epoch":"2026-07-19 16:37:35,934","call_order":1171,"extraction_index":1173,"global_index":1170},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:35,934","timestamp_epoch":"2026-07-19 16:37:35,934","call_order":1172,"extraction_index":1174,"global_index":1171},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:35,949","timestamp_epoch":"2026-07-19 16:37:35,949","call_order":1173,"extraction_index":1175,"global_index":1172},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:35,949","timestamp_epoch":"2026-07-19 16:37:35,949","call_order":1174,"extraction_index":1176,"global_index":1173},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:36,965","timestamp_epoch":"2026-07-19 16:37:36,965","call_order":1175,"extraction_index":1177,"global_index":1174},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:36,965","timestamp_epoch":"2026-07-19 16:37:36,965","call_order":1176,"extraction_index":1178,"global_index":1175},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:36,981","timestamp_epoch":"2026-07-19 16:37:36,981","call_order":1177,"extraction_index":1179,"global_index":1176},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:36,981","timestamp_epoch":"2026-07-19 16:37:36,981","call_order":1178,"extraction_index":1180,"global_index":1177},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:37,996","timestamp_epoch":"2026-07-19 16:37:37,996","call_order":1179,"extraction_index":1181,"global_index":1178},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:37,996","timestamp_epoch":"2026-07-19 16:37:37,996","call_order":1180,"extraction_index":1182,"global_index":1179},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:38,012","timestamp_epoch":"2026-07-19 16:37:38,012","call_order":1181,"extraction_index":1183,"global_index":1180},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:38,012","timestamp_epoch":"2026-07-19 16:37:38,012","call_order":1182,"extraction_index":1184,"global_index":1181},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:39,027","timestamp_epoch":"2026-07-19 16:37:39,027","call_order":1183,"extraction_index":1185,"global_index":1182},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:39,027","timestamp_epoch":"2026-07-19 16:37:39,027","call_order":1184,"extraction_index":1186,"global_index":1183},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:39,043","timestamp_epoch":"2026-07-19 16:37:39,043","call_order":1185,"extraction_index":1187,"global_index":1184},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:39,043","timestamp_epoch":"2026-07-19 16:37:39,043","call_order":1186,"extraction_index":1188,"global_index":1185},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:40,059","timestamp_epoch":"2026-07-19 16:37:40,059","call_order":1187,"extraction_index":1189,"global_index":1186},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:40,059","timestamp_epoch":"2026-07-19 16:37:40,059","call_order":1188,"extraction_index":1190,"global_index":1187},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:40,074","timestamp_epoch":"2026-07-19 16:37:40,074","call_order":1189,"extraction_index":1191,"global_index":1188},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:40,074","timestamp_epoch":"2026-07-19 16:37:40,074","call_order":1190,"extraction_index":1192,"global_index":1189},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:41,090","timestamp_epoch":"2026-07-19 16:37:41,090","call_order":1191,"extraction_index":1193,"global_index":1190},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:41,090","timestamp_epoch":"2026-07-19 16:37:41,090","call_order":1192,"extraction_index":1194,"global_index":1191},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:41,106","timestamp_epoch":"2026-07-19 16:37:41,106","call_order":1193,"extraction_index":1195,"global_index":1192},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:41,106","timestamp_epoch":"2026-07-19 16:37:41,106","call_order":1194,"extraction_index":1196,"global_index":1193},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:42,121","timestamp_epoch":"2026-07-19 16:37:42,121","call_order":1195,"extraction_index":1197,"global_index":1194},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:42,121","timestamp_epoch":"2026-07-19 16:37:42,121","call_order":1196,"extraction_index":1198,"global_index":1195},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:42,137","timestamp_epoch":"2026-07-19 16:37:42,137","call_order":1197,"extraction_index":1199,"global_index":1196},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:42,137","timestamp_epoch":"2026-07-19 16:37:42,137","call_order":1198,"extraction_index":1200,"global_index":1197},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:43,152","timestamp_epoch":"2026-07-19 16:37:43,152","call_order":1199,"extraction_index":1201,"global_index":1198},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:43,152","timestamp_epoch":"2026-07-19 16:37:43,152","call_order":1200,"extraction_index":1202,"global_index":1199},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:43,168","timestamp_epoch":"2026-07-19 16:37:43,168","call_order":1201,"extraction_index":1203,"global_index":1200},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:43,168","timestamp_epoch":"2026-07-19 16:37:43,168","call_order":1202,"extraction_index":1204,"global_index":1201},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:44,184","timestamp_epoch":"2026-07-19 16:37:44,184","call_order":1203,"extraction_index":1205,"global_index":1202},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:44,184","timestamp_epoch":"2026-07-19 16:37:44,184","call_order":1204,"extraction_index":1206,"global_index":1203},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:44,199","timestamp_epoch":"2026-07-19 16:37:44,199","call_order":1205,"extraction_index":1207,"global_index":1204},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:44,199","timestamp_epoch":"2026-07-19 16:37:44,199","call_order":1206,"extraction_index":1208,"global_index":1205},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:45,215","timestamp_epoch":"2026-07-19 16:37:45,215","call_order":1207,"extraction_index":1209,"global_index":1206},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:45,215","timestamp_epoch":"2026-07-19 16:37:45,215","call_order":1208,"extraction_index":1210,"global_index":1207},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:45,231","timestamp_epoch":"2026-07-19 16:37:45,231","call_order":1209,"extraction_index":1211,"global_index":1208},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:45,231","timestamp_epoch":"2026-07-19 16:37:45,231","call_order":1210,"extraction_index":1212,"global_index":1209},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:46,246","timestamp_epoch":"2026-07-19 16:37:46,246","call_order":1211,"extraction_index":1213,"global_index":1210},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:46,246","timestamp_epoch":"2026-07-19 16:37:46,246","call_order":1212,"extraction_index":1214,"global_index":1211},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:46,262","timestamp_epoch":"2026-07-19 16:37:46,262","call_order":1213,"extraction_index":1215,"global_index":1212},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:46,262","timestamp_epoch":"2026-07-19 16:37:46,262","call_order":1214,"extraction_index":1216,"global_index":1213},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:47,277","timestamp_epoch":"2026-07-19 16:37:47,277","call_order":1215,"extraction_index":1217,"global_index":1214},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:47,277","timestamp_epoch":"2026-07-19 16:37:47,277","call_order":1216,"extraction_index":1218,"global_index":1215},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:47,293","timestamp_epoch":"2026-07-19 16:37:47,293","call_order":1217,"extraction_index":1219,"global_index":1216},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:47,293","timestamp_epoch":"2026-07-19 16:37:47,293","call_order":1218,"extraction_index":1220,"global_index":1217},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:48,309","timestamp_epoch":"2026-07-19 16:37:48,309","call_order":1219,"extraction_index":1221,"global_index":1218},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:48,309","timestamp_epoch":"2026-07-19 16:37:48,309","call_order":1220,"extraction_index":1222,"global_index":1219},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:48,324","timestamp_epoch":"2026-07-19 16:37:48,324","call_order":1221,"extraction_index":1223,"global_index":1220},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:48,324","timestamp_epoch":"2026-07-19 16:37:48,324","call_order":1222,"extraction_index":1224,"global_index":1221},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:49,340","timestamp_epoch":"2026-07-19 16:37:49,340","call_order":1223,"extraction_index":1225,"global_index":1222},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:49,340","timestamp_epoch":"2026-07-19 16:37:49,340","call_order":1224,"extraction_index":1226,"global_index":1223},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:49,356","timestamp_epoch":"2026-07-19 16:37:49,356","call_order":1225,"extraction_index":1227,"global_index":1224},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:49,356","timestamp_epoch":"2026-07-19 16:37:49,356","call_order":1226,"extraction_index":1228,"global_index":1225},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:50,371","timestamp_epoch":"2026-07-19 16:37:50,371","call_order":1227,"extraction_index":1229,"global_index":1226},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:50,371","timestamp_epoch":"2026-07-19 16:37:50,371","call_order":1228,"extraction_index":1230,"global_index":1227},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:50,387","timestamp_epoch":"2026-07-19 16:37:50,387","call_order":1229,"extraction_index":1231,"global_index":1228},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:50,387","timestamp_epoch":"2026-07-19 16:37:50,387","call_order":1230,"extraction_index":1232,"global_index":1229},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:51,402","timestamp_epoch":"2026-07-19 16:37:51,402","call_order":1231,"extraction_index":1233,"global_index":1230},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:51,402","timestamp_epoch":"2026-07-19 16:37:51,402","call_order":1232,"extraction_index":1234,"global_index":1231},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:51,418","timestamp_epoch":"2026-07-19 16:37:51,418","call_order":1233,"extraction_index":1235,"global_index":1232},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:51,418","timestamp_epoch":"2026-07-19 16:37:51,418","call_order":1234,"extraction_index":1236,"global_index":1233},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:52,434","timestamp_epoch":"2026-07-19 16:37:52,434","call_order":1235,"extraction_index":1237,"global_index":1234},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:52,434","timestamp_epoch":"2026-07-19 16:37:52,434","call_order":1236,"extraction_index":1238,"global_index":1235},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:52,449","timestamp_epoch":"2026-07-19 16:37:52,449","call_order":1237,"extraction_index":1239,"global_index":1236},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:52,449","timestamp_epoch":"2026-07-19 16:37:52,449","call_order":1238,"extraction_index":1240,"global_index":1237},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:53,465","timestamp_epoch":"2026-07-19 16:37:53,465","call_order":1239,"extraction_index":1241,"global_index":1238},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:53,465","timestamp_epoch":"2026-07-19 16:37:53,465","call_order":1240,"extraction_index":1242,"global_index":1239},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:53,481","timestamp_epoch":"2026-07-19 16:37:53,481","call_order":1241,"extraction_index":1243,"global_index":1240},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:53,481","timestamp_epoch":"2026-07-19 16:37:53,481","call_order":1242,"extraction_index":1244,"global_index":1241},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:54,496","timestamp_epoch":"2026-07-19 16:37:54,496","call_order":1243,"extraction_index":1245,"global_index":1242},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:54,496","timestamp_epoch":"2026-07-19 16:37:54,496","call_order":1244,"extraction_index":1246,"global_index":1243},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:54,512","timestamp_epoch":"2026-07-19 16:37:54,512","call_order":1245,"extraction_index":1247,"global_index":1244},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:54,512","timestamp_epoch":"2026-07-19 16:37:54,512","call_order":1246,"extraction_index":1248,"global_index":1245},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:55,527","timestamp_epoch":"2026-07-19 16:37:55,527","call_order":1247,"extraction_index":1249,"global_index":1246},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:55,527","timestamp_epoch":"2026-07-19 16:37:55,527","call_order":1248,"extraction_index":1250,"global_index":1247},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:55,543","timestamp_epoch":"2026-07-19 16:37:55,543","call_order":1249,"extraction_index":1251,"global_index":1248},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:55,543","timestamp_epoch":"2026-07-19 16:37:55,543","call_order":1250,"extraction_index":1252,"global_index":1249},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:56,559","timestamp_epoch":"2026-07-19 16:37:56,559","call_order":1251,"extraction_index":1253,"global_index":1250},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:56,559","timestamp_epoch":"2026-07-19 16:37:56,559","call_order":1252,"extraction_index":1254,"global_index":1251},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:56,574","timestamp_epoch":"2026-07-19 16:37:56,574","call_order":1253,"extraction_index":1255,"global_index":1252},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:56,574","timestamp_epoch":"2026-07-19 16:37:56,574","call_order":1254,"extraction_index":1256,"global_index":1253},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:57,590","timestamp_epoch":"2026-07-19 16:37:57,590","call_order":1255,"extraction_index":1257,"global_index":1254},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:57,590","timestamp_epoch":"2026-07-19 16:37:57,590","call_order":1256,"extraction_index":1258,"global_index":1255},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:57,606","timestamp_epoch":"2026-07-19 16:37:57,606","call_order":1257,"extraction_index":1259,"global_index":1256},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:57,606","timestamp_epoch":"2026-07-19 16:37:57,606","call_order":1258,"extraction_index":1260,"global_index":1257},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:58,621","timestamp_epoch":"2026-07-19 16:37:58,621","call_order":1259,"extraction_index":1261,"global_index":1258},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:58,621","timestamp_epoch":"2026-07-19 16:37:58,621","call_order":1260,"extraction_index":1262,"global_index":1259},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:58,637","timestamp_epoch":"2026-07-19 16:37:58,637","call_order":1261,"extraction_index":1263,"global_index":1260},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:58,637","timestamp_epoch":"2026-07-19 16:37:58,637","call_order":1262,"extraction_index":1264,"global_index":1261},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:59,652","timestamp_epoch":"2026-07-19 16:37:59,652","call_order":1263,"extraction_index":1265,"global_index":1262},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:37:59,652","timestamp_epoch":"2026-07-19 16:37:59,652","call_order":1264,"extraction_index":1266,"global_index":1263},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:37:59,668","timestamp_epoch":"2026-07-19 16:37:59,668","call_order":1265,"extraction_index":1267,"global_index":1264},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:37:59,668","timestamp_epoch":"2026-07-19 16:37:59,668","call_order":1266,"extraction_index":1268,"global_index":1265},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:00,684","timestamp_epoch":"2026-07-19 16:38:00,684","call_order":1267,"extraction_index":1269,"global_index":1266},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:38:00,684","timestamp_epoch":"2026-07-19 16:38:00,684","call_order":1268,"extraction_index":1270,"global_index":1267},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:00,699","timestamp_epoch":"2026-07-19 16:38:00,699","call_order":1269,"extraction_index":1271,"global_index":1268},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:38:00,699","timestamp_epoch":"2026-07-19 16:38:00,699","call_order":1270,"extraction_index":1272,"global_index":1269},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:01,715","timestamp_epoch":"2026-07-19 16:38:01,715","call_order":1271,"extraction_index":1273,"global_index":1270},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:38:01,715","timestamp_epoch":"2026-07-19 16:38:01,715","call_order":1272,"extraction_index":1274,"global_index":1271},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:01,731","timestamp_epoch":"2026-07-19 16:38:01,731","call_order":1273,"extraction_index":1275,"global_index":1272},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:38:01,731","timestamp_epoch":"2026-07-19 16:38:01,731","call_order":1274,"extraction_index":1276,"global_index":1273},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:02,746","timestamp_epoch":"2026-07-19 16:38:02,746","call_order":1275,"extraction_index":1277,"global_index":1274},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:38:02,746","timestamp_epoch":"2026-07-19 16:38:02,746","call_order":1276,"extraction_index":1278,"global_index":1275},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:02,762","timestamp_epoch":"2026-07-19 16:38:02,762","call_order":1277,"extraction_index":1279,"global_index":1276},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:38:02,762","timestamp_epoch":"2026-07-19 16:38:02,762","call_order":1278,"extraction_index":1280,"global_index":1277},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:03,777","timestamp_epoch":"2026-07-19 16:38:03,777","call_order":1279,"extraction_index":1281,"global_index":1278},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:38:03,777","timestamp_epoch":"2026-07-19 16:38:03,777","call_order":1280,"extraction_index":1282,"global_index":1279},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:03,793","timestamp_epoch":"2026-07-19 16:38:03,793","call_order":1281,"extraction_index":1283,"global_index":1280},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:38:03,793","timestamp_epoch":"2026-07-19 16:38:03,793","call_order":1282,"extraction_index":1284,"global_index":1281},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:04,809","timestamp_epoch":"2026-07-19 16:38:04,809","call_order":1283,"extraction_index":1285,"global_index":1282},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:38:04,809","timestamp_epoch":"2026-07-19 16:38:04,809","call_order":1284,"extraction_index":1286,"global_index":1283},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:04,824","timestamp_epoch":"2026-07-19 16:38:04,824","call_order":1285,"extraction_index":1287,"global_index":1284},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:38:04,824","timestamp_epoch":"2026-07-19 16:38:04,824","call_order":1286,"extraction_index":1288,"global_index":1285},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:05,840","timestamp_epoch":"2026-07-19 16:38:05,840","call_order":1287,"extraction_index":1289,"global_index":1286},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:38:05,840","timestamp_epoch":"2026-07-19 16:38:05,840","call_order":1288,"extraction_index":1290,"global_index":1287},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:05,856","timestamp_epoch":"2026-07-19 16:38:05,856","call_order":1289,"extraction_index":1291,"global_index":1288},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:38:05,856","timestamp_epoch":"2026-07-19 16:38:05,856","call_order":1290,"extraction_index":1292,"global_index":1289},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:06,871","timestamp_epoch":"2026-07-19 16:38:06,871","call_order":1291,"extraction_index":1293,"global_index":1290},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:38:06,871","timestamp_epoch":"2026-07-19 16:38:06,871","call_order":1292,"extraction_index":1294,"global_index":1291},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:06,887","timestamp_epoch":"2026-07-19 16:38:06,887","call_order":1293,"extraction_index":1295,"global_index":1292},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:38:06,887","timestamp_epoch":"2026-07-19 16:38:06,887","call_order":1294,"extraction_index":1296,"global_index":1293},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:07,902","timestamp_epoch":"2026-07-19 16:38:07,902","call_order":1295,"extraction_index":1297,"global_index":1294},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:38:07,902","timestamp_epoch":"2026-07-19 16:38:07,902","call_order":1296,"extraction_index":1298,"global_index":1295},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:07,918","timestamp_epoch":"2026-07-19 16:38:07,918","call_order":1297,"extraction_index":1299,"global_index":1296},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:38:07,918","timestamp_epoch":"2026-07-19 16:38:07,918","call_order":1298,"extraction_index":1300,"global_index":1297},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:08,934","timestamp_epoch":"2026-07-19 16:38:08,934","call_order":1299,"extraction_index":1301,"global_index":1298},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:38:08,934","timestamp_epoch":"2026-07-19 16:38:08,934","call_order":1300,"extraction_index":1302,"global_index":1299},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:08,949","timestamp_epoch":"2026-07-19 16:38:08,949","call_order":1301,"extraction_index":1303,"global_index":1300},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:38:08,949","timestamp_epoch":"2026-07-19 16:38:08,949","call_order":1302,"extraction_index":1304,"global_index":1301},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:09,965","timestamp_epoch":"2026-07-19 16:38:09,965","call_order":1303,"extraction_index":1305,"global_index":1302},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:38:09,965","timestamp_epoch":"2026-07-19 16:38:09,965","call_order":1304,"extraction_index":1306,"global_index":1303},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:09,981","timestamp_epoch":"2026-07-19 16:38:09,981","call_order":1305,"extraction_index":1307,"global_index":1304},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:38:09,981","timestamp_epoch":"2026-07-19 16:38:09,981","call_order":1306,"extraction_index":1308,"global_index":1305},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:10,996","timestamp_epoch":"2026-07-19 16:38:10,996","call_order":1307,"extraction_index":1309,"global_index":1306},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:38:10,996","timestamp_epoch":"2026-07-19 16:38:10,996","call_order":1308,"extraction_index":1310,"global_index":1307},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:11,012","timestamp_epoch":"2026-07-19 16:38:11,012","call_order":1309,"extraction_index":1311,"global_index":1308},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:38:11,012","timestamp_epoch":"2026-07-19 16:38:11,012","call_order":1310,"extraction_index":1312,"global_index":1309},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:12,027","timestamp_epoch":"2026-07-19 16:38:12,027","call_order":1311,"extraction_index":1313,"global_index":1310},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:38:12,027","timestamp_epoch":"2026-07-19 16:38:12,027","call_order":1312,"extraction_index":1314,"global_index":1311},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:12,043","timestamp_epoch":"2026-07-19 16:38:12,043","call_order":1313,"extraction_index":1315,"global_index":1312},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:38:12,043","timestamp_epoch":"2026-07-19 16:38:12,043","call_order":1314,"extraction_index":1316,"global_index":1313},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:13,059","timestamp_epoch":"2026-07-19 16:38:13,059","call_order":1315,"extraction_index":1317,"global_index":1314},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:38:13,059","timestamp_epoch":"2026-07-19 16:38:13,059","call_order":1316,"extraction_index":1318,"global_index":1315},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:13,074","timestamp_epoch":"2026-07-19 16:38:13,074","call_order":1317,"extraction_index":1319,"global_index":1316},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:38:13,074","timestamp_epoch":"2026-07-19 16:38:13,074","call_order":1318,"extraction_index":1320,"global_index":1317},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:14,090","timestamp_epoch":"2026-07-19 16:38:14,090","call_order":1319,"extraction_index":1321,"global_index":1318},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:38:14,090","timestamp_epoch":"2026-07-19 16:38:14,090","call_order":1320,"extraction_index":1322,"global_index":1319},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:14,106","timestamp_epoch":"2026-07-19 16:38:14,106","call_order":1321,"extraction_index":1323,"global_index":1320},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:38:14,106","timestamp_epoch":"2026-07-19 16:38:14,106","call_order":1322,"extraction_index":1324,"global_index":1321},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:15,121","timestamp_epoch":"2026-07-19 16:38:15,121","call_order":1323,"extraction_index":1325,"global_index":1322},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:38:15,121","timestamp_epoch":"2026-07-19 16:38:15,121","call_order":1324,"extraction_index":1326,"global_index":1323},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:15,137","timestamp_epoch":"2026-07-19 16:38:15,137","call_order":1325,"extraction_index":1327,"global_index":1324},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:38:15,137","timestamp_epoch":"2026-07-19 16:38:15,137","call_order":1326,"extraction_index":1328,"global_index":1325},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:16,152","timestamp_epoch":"2026-07-19 16:38:16,152","call_order":1327,"extraction_index":1329,"global_index":1326},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:38:16,152","timestamp_epoch":"2026-07-19 16:38:16,152","call_order":1328,"extraction_index":1330,"global_index":1327},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:16,168","timestamp_epoch":"2026-07-19 16:38:16,168","call_order":1329,"extraction_index":1331,"global_index":1328},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:38:16,168","timestamp_epoch":"2026-07-19 16:38:16,168","call_order":1330,"extraction_index":1332,"global_index":1329},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:17,184","timestamp_epoch":"2026-07-19 16:38:17,184","call_order":1331,"extraction_index":1333,"global_index":1330},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:38:17,184","timestamp_epoch":"2026-07-19 16:38:17,184","call_order":1332,"extraction_index":1334,"global_index":1331},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:17,199","timestamp_epoch":"2026-07-19 16:38:17,199","call_order":1333,"extraction_index":1335,"global_index":1332},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:38:17,199","timestamp_epoch":"2026-07-19 16:38:17,199","call_order":1334,"extraction_index":1336,"global_index":1333},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:18,215","timestamp_epoch":"2026-07-19 16:38:18,215","call_order":1335,"extraction_index":1337,"global_index":1334},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:38:18,215","timestamp_epoch":"2026-07-19 16:38:18,215","call_order":1336,"extraction_index":1338,"global_index":1335},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:18,231","timestamp_epoch":"2026-07-19 16:38:18,231","call_order":1337,"extraction_index":1339,"global_index":1336},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:38:18,231","timestamp_epoch":"2026-07-19 16:38:18,231","call_order":1338,"extraction_index":1340,"global_index":1337},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:19,246","timestamp_epoch":"2026-07-19 16:38:19,246","call_order":1339,"extraction_index":1341,"global_index":1338},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:38:19,246","timestamp_epoch":"2026-07-19 16:38:19,246","call_order":1340,"extraction_index":1342,"global_index":1339},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:19,262","timestamp_epoch":"2026-07-19 16:38:19,262","call_order":1341,"extraction_index":1343,"global_index":1340},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:38:19,262","timestamp_epoch":"2026-07-19 16:38:19,262","call_order":1342,"extraction_index":1344,"global_index":1341},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:20,277","timestamp_epoch":"2026-07-19 16:38:20,277","call_order":1343,"extraction_index":1345,"global_index":1342},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:38:20,277","timestamp_epoch":"2026-07-19 16:38:20,277","call_order":1344,"extraction_index":1346,"global_index":1343},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:20,293","timestamp_epoch":"2026-07-19 16:38:20,293","call_order":1345,"extraction_index":1347,"global_index":1344},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:38:20,293","timestamp_epoch":"2026-07-19 16:38:20,293","call_order":1346,"extraction_index":1348,"global_index":1345},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:21,309","timestamp_epoch":"2026-07-19 16:38:21,309","call_order":1347,"extraction_index":1349,"global_index":1346},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:38:21,309","timestamp_epoch":"2026-07-19 16:38:21,309","call_order":1348,"extraction_index":1350,"global_index":1347},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:21,324","timestamp_epoch":"2026-07-19 16:38:21,324","call_order":1349,"extraction_index":1351,"global_index":1348},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:38:21,324","timestamp_epoch":"2026-07-19 16:38:21,324","call_order":1350,"extraction_index":1352,"global_index":1349},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:22,340","timestamp_epoch":"2026-07-19 16:38:22,340","call_order":1351,"extraction_index":1353,"global_index":1350},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:38:22,340","timestamp_epoch":"2026-07-19 16:38:22,340","call_order":1352,"extraction_index":1354,"global_index":1351},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:22,356","timestamp_epoch":"2026-07-19 16:38:22,356","call_order":1353,"extraction_index":1355,"global_index":1352},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:38:22,356","timestamp_epoch":"2026-07-19 16:38:22,356","call_order":1354,"extraction_index":1356,"global_index":1353},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:23,371","timestamp_epoch":"2026-07-19 16:38:23,371","call_order":1355,"extraction_index":1357,"global_index":1354},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:38:23,371","timestamp_epoch":"2026-07-19 16:38:23,371","call_order":1356,"extraction_index":1358,"global_index":1355},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:23,387","timestamp_epoch":"2026-07-19 16:38:23,387","call_order":1357,"extraction_index":1359,"global_index":1356},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:38:23,387","timestamp_epoch":"2026-07-19 16:38:23,387","call_order":1358,"extraction_index":1360,"global_index":1357},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:24,402","timestamp_epoch":"2026-07-19 16:38:24,402","call_order":1359,"extraction_index":1361,"global_index":1358},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:38:24,402","timestamp_epoch":"2026-07-19 16:38:24,402","call_order":1360,"extraction_index":1362,"global_index":1359},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:24,418","timestamp_epoch":"2026-07-19 16:38:24,418","call_order":1361,"extraction_index":1363,"global_index":1360},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:38:24,418","timestamp_epoch":"2026-07-19 16:38:24,418","call_order":1362,"extraction_index":1364,"global_index":1361},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:25,434","timestamp_epoch":"2026-07-19 16:38:25,434","call_order":1363,"extraction_index":1365,"global_index":1362},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:38:25,434","timestamp_epoch":"2026-07-19 16:38:25,434","call_order":1364,"extraction_index":1366,"global_index":1363},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:25,449","timestamp_epoch":"2026-07-19 16:38:25,449","call_order":1365,"extraction_index":1367,"global_index":1364},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:38:25,449","timestamp_epoch":"2026-07-19 16:38:25,449","call_order":1366,"extraction_index":1368,"global_index":1365},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:26,465","timestamp_epoch":"2026-07-19 16:38:26,465","call_order":1367,"extraction_index":1369,"global_index":1366},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1"}],"timestamp":"2026-07-19 16:38:26,465","timestamp_epoch":"2026-07-19 16:38:26,465","call_order":1368,"extraction_index":1370,"global_index":1367},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"GetCursorPos","category":"misc","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"x","value":"6"},{"name":"y","value":"251"}],"timestamp":"2026-07-19 16:38:26,481","timestamp_epoch":"2026-07-19 16:38:26,481","call_order":1369,"extraction_index":1371,"global_index":1368},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"NtDelayExecution","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"Milliseconds","value":"1001"}],"timestamp":"2026-07-19 16:38:26,481","timestamp_epoch":"2026-07-19 16:38:26,481","call_order":1370,"extraction_index":1372,"global_index":1369},{"event_type":"process_start","source":"processtree","pid":7964,"ppid":null,"process_name":"rp-019f79b8d2487453a.exe","module_path":"C:\\Users\\0xKal\\AppData\\Local\\Temp\\rp-019f79b8d2487453a.exe","command_line":null,"first_seen":null,"first_seen_epoch":null,"timestamp":null,"timestamp_epoch":null,"extraction_index":0,"global_index":1370},{"event_type":"process_tracked","source":"behavior.processes","pid":7964,"ppid":3844,"process_name":"rp-019f79b8d2487453a.exe","module_path":"C:\\Users\\0xKal\\AppData\\Local\\Temp\\rp-019f79b8d2487453a.exe","first_seen":"2026-07-19 16:33:25,746","first_seen_epoch":"2026-07-19 16:33:25,746","timestamp":"2026-07-19 16:33:25,746","timestamp_epoch":"2026-07-19 16:33:25,746","total_api_calls":1371,"threads":["3168","5996","5572","2044","2700","4164","1012","8804"],"environ_snapshot":{"UserName":"0xKal","ComputerName":"DESKTOP-KUFHK6V","WindowsPath":"C:\\Windows","TempPath":"C:\\Users\\0xKal\\AppData\\Local\\Temp\\","CommandLine":"\"C:\\Users\\0xKal\\AppData\\Local\\Temp\\rp-019f79b8d2487453a.exe\" ","RegisteredOwner":"","RegisteredOrganization":"","ProductName":"","SystemVolumeSerialNumber":"6e40-a117","SystemVolumeGUID":"850a01dc-0000-0000-0000-300300000000","MachineGUID":"","MainExeBase":"0x00080000","MainExeSize":"0x00676000","Bitness":"32-bit"},"extraction_index":1,"global_index":1371},{"event_type":"api_call","source":"behavior.processes.calls","pid":7964,"process_name":"rp-019f79b8d2487453a.exe","api":"LdrpCallInitRoutine","category":"system","status":true,"return_value":null,"repeated":0,"arguments":[{"name":"MappedPath","value":"\\Device\\HarddiskVolume2\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.6456_none_d950d087e104e52a\\GdiPlus"},{"name":"BaseAddress","value":"0x72360000"},{"name":"InitRoutine","value":"0x723d9590"},{"name":"Reason","value":"1"}],"timestamp":"2026-07-19 16:33:25,871","timestamp_epoch":"2026-07-19 16:33:25,871","call_order":0,"extraction_index":2,"global_index":1372},{"event_type":"enhanced_load","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"load","category":null,"details":{"event":"load","object":"library","timestamp":"2026-07-19 16:33:25,934","eid":1,"data":{"file":"kernel32.dll","pathtofile":null,"moduleaddress":null}},"timestamp":"2026-07-19 16:33:25,934","timestamp_epoch":"2026-07-19 16:33:25,934","extraction_index":1373,"global_index":1373},{"event_type":"enhanced_load","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"load","category":null,"details":{"event":"load","object":"library","timestamp":"2026-07-19 16:33:25,934","eid":2,"data":{"file":"user32.dll","pathtofile":null,"moduleaddress":"0x75cc0000"}},"timestamp":"2026-07-19 16:33:25,934","timestamp_epoch":"2026-07-19 16:33:25,934","extraction_index":1374,"global_index":1374},{"event_type":"enhanced_load","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"load","category":null,"details":{"event":"load","object":"library","timestamp":"2026-07-19 16:33:25,934","eid":3,"data":{"file":"advapi32.dll","pathtofile":null,"moduleaddress":"0x763b0000"}},"timestamp":"2026-07-19 16:33:25,934","timestamp_epoch":"2026-07-19 16:33:25,934","extraction_index":1375,"global_index":1375},{"event_type":"enhanced_load","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"load","category":null,"details":{"event":"load","object":"library","timestamp":"2026-07-19 16:33:25,934","eid":4,"data":{"file":"ntdll.dll","pathtofile":null,"moduleaddress":"0x77930000"}},"timestamp":"2026-07-19 16:33:25,934","timestamp_epoch":"2026-07-19 16:33:25,934","extraction_index":1376,"global_index":1376},{"event_type":"enhanced_load","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"load","category":null,"details":{"event":"load","object":"library","timestamp":"2026-07-19 16:33:25,934","eid":5,"data":{"file":"shell32.dll","pathtofile":null,"moduleaddress":"0x76ee0000"}},"timestamp":"2026-07-19 16:33:25,934","timestamp_epoch":"2026-07-19 16:33:25,934","extraction_index":1377,"global_index":1377},{"event_type":"enhanced_load","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"load","category":null,"details":{"event":"load","object":"library","timestamp":"2026-07-19 16:33:25,934","eid":6,"data":{"file":"shlwapi.dll","pathtofile":null,"moduleaddress":"0x76850000"}},"timestamp":"2026-07-19 16:33:25,934","timestamp_epoch":"2026-07-19 16:33:25,934","extraction_index":1378,"global_index":1378},{"event_type":"enhanced_read","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"read","category":null,"details":{"event":"read","object":"registry","timestamp":"2026-07-19 16:33:25,949","eid":7,"data":{"regkey":"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\EnableLUA","content":"1"}},"timestamp":"2026-07-19 16:33:25,949","timestamp_epoch":"2026-07-19 16:33:25,949","extraction_index":1379,"global_index":1379},{"event_type":"enhanced_read","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"read","category":null,"details":{"event":"read","object":"registry","timestamp":"2026-07-19 16:33:25,949","eid":8,"data":{"regkey":"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\SystemStartOptions","content":" NOEXECUTE=OPTIN"}},"timestamp":"2026-07-19 16:33:25,949","timestamp_epoch":"2026-07-19 16:33:25,949","extraction_index":1380,"global_index":1380},{"event_type":"enhanced_read","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"read","category":null,"details":{"event":"read","object":"registry","timestamp":"2026-07-19 16:33:25,949","eid":9,"data":{"regkey":"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Class\\{4d36e968-e325-11ce-bfc1-08002be10318}\\0000\\DriverDesc","content":null}},"timestamp":"2026-07-19 16:33:25,949","timestamp_epoch":"2026-07-19 16:33:25,949","extraction_index":1381,"global_index":1381},{"event_type":"enhanced_read","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"read","category":null,"details":{"event":"read","object":"registry","timestamp":"2026-07-19 16:33:25,949","eid":10,"data":{"regkey":"HKEY_LOCAL_MACHINE\\HARDWARE\\DESCRIPTION\\System\\SystemBiosVersion","content":"\\x00"}},"timestamp":"2026-07-19 16:33:25,949","timestamp_epoch":"2026-07-19 16:33:25,949","extraction_index":1382,"global_index":1382},{"event_type":"enhanced_read","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"read","category":null,"details":{"event":"read","object":"registry","timestamp":"2026-07-19 16:33:25,949","eid":11,"data":{"regkey":"HKEY_LOCAL_MACHINE\\HARDWARE\\DESCRIPTION\\System\\VideoBiosVersion","content":null}},"timestamp":"2026-07-19 16:33:25,949","timestamp_epoch":"2026-07-19 16:33:25,949","extraction_index":1383,"global_index":1383},{"event_type":"enhanced_read","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"read","category":null,"details":{"event":"read","object":"registry","timestamp":"2026-07-19 16:33:25,949","eid":12,"data":{"regkey":"HKEY_LOCAL_MACHINE\\HARDWARE\\DESCRIPTION\\System\\SystemBiosVersion","content":"\\x00"}},"timestamp":"2026-07-19 16:33:25,949","timestamp_epoch":"2026-07-19 16:33:25,949","extraction_index":1384,"global_index":1384},{"event_type":"enhanced_load","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"load","category":null,"details":{"event":"load","object":"library","timestamp":"2026-07-19 16:33:26,293","eid":13,"data":{"file":"ADVAPI32.DLL","pathtofile":null,"moduleaddress":null}},"timestamp":"2026-07-19 16:33:26,293","timestamp_epoch":"2026-07-19 16:33:26,293","extraction_index":1385,"global_index":1385},{"event_type":"enhanced_load","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"load","category":null,"details":{"event":"load","object":"library","timestamp":"2026-07-19 16:33:26,293","eid":14,"data":{"file":"GDIPLUS.DLL","pathtofile":null,"moduleaddress":null}},"timestamp":"2026-07-19 16:33:26,293","timestamp_epoch":"2026-07-19 16:33:26,293","extraction_index":1386,"global_index":1386},{"event_type":"enhanced_load","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"load","category":null,"details":{"event":"load","object":"library","timestamp":"2026-07-19 16:33:26,293","eid":15,"data":{"file":"USER32.DLL","pathtofile":null,"moduleaddress":null}},"timestamp":"2026-07-19 16:33:26,293","timestamp_epoch":"2026-07-19 16:33:26,293","extraction_index":1387,"global_index":1387},{"event_type":"enhanced_load","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"load","category":null,"details":{"event":"load","object":"library","timestamp":"2026-07-19 16:33:26,293","eid":16,"data":{"file":"SHLWAPI.DLL","pathtofile":null,"moduleaddress":null}},"timestamp":"2026-07-19 16:33:26,293","timestamp_epoch":"2026-07-19 16:33:26,293","extraction_index":1388,"global_index":1388},{"event_type":"enhanced_load","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"load","category":null,"details":{"event":"load","object":"library","timestamp":"2026-07-19 16:33:26,293","eid":17,"data":{"file":"SHELL32.DLL","pathtofile":null,"moduleaddress":null}},"timestamp":"2026-07-19 16:33:26,293","timestamp_epoch":"2026-07-19 16:33:26,293","extraction_index":1389,"global_index":1389},{"event_type":"enhanced_load","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"load","category":null,"details":{"event":"load","object":"library","timestamp":"2026-07-19 16:33:26,293","eid":18,"data":{"file":"KERNEL32.DLL","pathtofile":null,"moduleaddress":null}},"timestamp":"2026-07-19 16:33:26,293","timestamp_epoch":"2026-07-19 16:33:26,293","extraction_index":1390,"global_index":1390},{"event_type":"enhanced_load","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"load","category":null,"details":{"event":"load","object":"library","timestamp":"2026-07-19 16:33:26,293","eid":19,"data":{"file":"GDI32.DLL","pathtofile":null,"moduleaddress":null}},"timestamp":"2026-07-19 16:33:26,293","timestamp_epoch":"2026-07-19 16:33:26,293","extraction_index":1391,"global_index":1391},{"event_type":"enhanced_load","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"load","category":null,"details":{"event":"load","object":"library","timestamp":"2026-07-19 16:33:26,293","eid":20,"data":{"file":"CRYPT32.DLL","pathtofile":null,"moduleaddress":null}},"timestamp":"2026-07-19 16:33:26,293","timestamp_epoch":"2026-07-19 16:33:26,293","extraction_index":1392,"global_index":1392},{"event_type":"enhanced_load","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"load","category":null,"details":{"event":"load","object":"library","timestamp":"2026-07-19 16:33:26,293","eid":21,"data":{"file":"SETUPAPI.DLL","pathtofile":null,"moduleaddress":null}},"timestamp":"2026-07-19 16:33:26,293","timestamp_epoch":"2026-07-19 16:33:26,293","extraction_index":1393,"global_index":1393},{"event_type":"enhanced_load","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"load","category":null,"details":{"event":"load","object":"library","timestamp":"2026-07-19 16:33:26,293","eid":22,"data":{"file":"WS2_32.DLL","pathtofile":null,"moduleaddress":null}},"timestamp":"2026-07-19 16:33:26,293","timestamp_epoch":"2026-07-19 16:33:26,293","extraction_index":1394,"global_index":1394},{"event_type":"enhanced_load","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"load","category":null,"details":{"event":"load","object":"library","timestamp":"2026-07-19 16:33:26,293","eid":23,"data":{"file":"OLE32.DLL","pathtofile":null,"moduleaddress":null}},"timestamp":"2026-07-19 16:33:26,293","timestamp_epoch":"2026-07-19 16:33:26,293","extraction_index":1395,"global_index":1395},{"event_type":"enhanced_load","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"load","category":null,"details":{"event":"load","object":"library","timestamp":"2026-07-19 16:33:26,293","eid":24,"data":{"file":"NTDLL.DLL","pathtofile":null,"moduleaddress":null}},"timestamp":"2026-07-19 16:33:26,293","timestamp_epoch":"2026-07-19 16:33:26,293","extraction_index":1396,"global_index":1396},{"event_type":"enhanced_load","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"load","category":null,"details":{"event":"load","object":"library","timestamp":"2026-07-19 16:33:26,293","eid":25,"data":{"file":"RSTRTMGR.DLL","pathtofile":null,"moduleaddress":null}},"timestamp":"2026-07-19 16:33:26,293","timestamp_epoch":"2026-07-19 16:33:26,293","extraction_index":1397,"global_index":1397},{"event_type":"enhanced_load","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"load","category":null,"details":{"event":"load","object":"library","timestamp":"2026-07-19 16:33:26,356","eid":26,"data":{"file":"api-ms-win-core-com-l1-1-0","pathtofile":null,"moduleaddress":null}},"timestamp":"2026-07-19 16:33:26,356","timestamp_epoch":"2026-07-19 16:33:26,356","extraction_index":1398,"global_index":1398},{"event_type":"enhanced_load","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"load","category":null,"details":{"event":"load","object":"library","timestamp":"2026-07-19 16:33:26,356","eid":27,"data":{"file":"api-ms-win-core-com-l1-1-0","pathtofile":null,"moduleaddress":null}},"timestamp":"2026-07-19 16:33:26,356","timestamp_epoch":"2026-07-19 16:33:26,356","extraction_index":1399,"global_index":1399},{"event_type":"enhanced_load","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"load","category":null,"details":{"event":"load","object":"library","timestamp":"2026-07-19 16:33:26,356","eid":28,"data":{"file":"api-ms-win-core-synch-l1-2-0","pathtofile":null,"moduleaddress":null}},"timestamp":"2026-07-19 16:33:26,356","timestamp_epoch":"2026-07-19 16:33:26,356","extraction_index":1400,"global_index":1400},{"event_type":"enhanced_load","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"load","category":null,"details":{"event":"load","object":"library","timestamp":"2026-07-19 16:33:26,356","eid":29,"data":{"file":"api-ms-win-core-com-l1-1-0","pathtofile":null,"moduleaddress":null}},"timestamp":"2026-07-19 16:33:26,356","timestamp_epoch":"2026-07-19 16:33:26,356","extraction_index":1401,"global_index":1401},{"event_type":"enhanced_load","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"load","category":null,"details":{"event":"load","object":"library","timestamp":"2026-07-19 16:33:26,449","eid":30,"data":{"file":"api-ms-win-core-synch-l1-2-0","pathtofile":null,"moduleaddress":"0x75ef0000"}},"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","extraction_index":1402,"global_index":1402},{"event_type":"enhanced_load","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"load","category":null,"details":{"event":"load","object":"library","timestamp":"2026-07-19 16:33:26,449","eid":31,"data":{"file":null,"pathtofile":null,"moduleaddress":null}},"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","extraction_index":1403,"global_index":1403},{"event_type":"enhanced_load","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"load","category":null,"details":{"event":"load","object":"library","timestamp":"2026-07-19 16:33:26,449","eid":32,"data":{"file":"api-ms-win-core-fibers-l1-1-1","pathtofile":null,"moduleaddress":"0x75ef0000"}},"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","extraction_index":1404,"global_index":1404},{"event_type":"enhanced_load","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"load","category":null,"details":{"event":"load","object":"library","timestamp":"2026-07-19 16:33:26,449","eid":33,"data":{"file":null,"pathtofile":null,"moduleaddress":null}},"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","extraction_index":1405,"global_index":1405},{"event_type":"enhanced_load","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"load","category":null,"details":{"event":"load","object":"library","timestamp":"2026-07-19 16:33:26,449","eid":34,"data":{"file":"api-ms-win-core-synch-l1-2-0","pathtofile":null,"moduleaddress":"0x75ef0000"}},"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","extraction_index":1406,"global_index":1406},{"event_type":"enhanced_load","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"load","category":null,"details":{"event":"load","object":"library","timestamp":"2026-07-19 16:33:26,449","eid":35,"data":{"file":null,"pathtofile":null,"moduleaddress":null}},"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","extraction_index":1407,"global_index":1407},{"event_type":"enhanced_load","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"load","category":null,"details":{"event":"load","object":"library","timestamp":"2026-07-19 16:33:26,449","eid":36,"data":{"file":"api-ms-win-core-fibers-l1-1-0","pathtofile":null,"moduleaddress":"0x75ef0000"}},"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","extraction_index":1408,"global_index":1408},{"event_type":"enhanced_load","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"load","category":null,"details":{"event":"load","object":"library","timestamp":"2026-07-19 16:33:26,449","eid":37,"data":{"file":null,"pathtofile":null,"moduleaddress":null}},"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","extraction_index":1409,"global_index":1409},{"event_type":"enhanced_load","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"load","category":null,"details":{"event":"load","object":"library","timestamp":"2026-07-19 16:33:26,449","eid":38,"data":{"file":"api-ms-win-core-localization-l1-2-1","pathtofile":null,"moduleaddress":"0x75ef0000"}},"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","extraction_index":1410,"global_index":1410},{"event_type":"enhanced_load","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"load","category":null,"details":{"event":"load","object":"library","timestamp":"2026-07-19 16:33:26,449","eid":39,"data":{"file":null,"pathtofile":null,"moduleaddress":null}},"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","extraction_index":1411,"global_index":1411},{"event_type":"enhanced_load","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"load","category":null,"details":{"event":"load","object":"library","timestamp":"2026-07-19 16:33:26,449","eid":40,"data":{"file":"kernel32","pathtofile":null,"moduleaddress":"0x77750000"}},"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","extraction_index":1412,"global_index":1412},{"event_type":"enhanced_load","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"load","category":null,"details":{"event":"load","object":"library","timestamp":"2026-07-19 16:33:26,449","eid":41,"data":{"file":null,"pathtofile":null,"moduleaddress":null}},"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","extraction_index":1413,"global_index":1413},{"event_type":"enhanced_load","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"load","category":null,"details":{"event":"load","object":"library","timestamp":"2026-07-19 16:33:26,449","eid":42,"data":{"file":"kernel32.dll","pathtofile":null,"moduleaddress":null}},"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","extraction_index":1414,"global_index":1414},{"event_type":"enhanced_load","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"load","category":null,"details":{"event":"load","object":"library","timestamp":"2026-07-19 16:33:26,449","eid":43,"data":{"file":"api-ms-win-core-string-l1-1-0","pathtofile":null,"moduleaddress":"0x75ef0000"}},"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","extraction_index":1415,"global_index":1415},{"event_type":"enhanced_load","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"load","category":null,"details":{"event":"load","object":"library","timestamp":"2026-07-19 16:33:26,449","eid":44,"data":{"file":null,"pathtofile":null,"moduleaddress":null}},"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","extraction_index":1416,"global_index":1416},{"event_type":"enhanced_load","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"load","category":null,"details":{"event":"load","object":"library","timestamp":"2026-07-19 16:33:26,449","eid":45,"data":{"file":"api-ms-win-core-datetime-l1-1-1","pathtofile":null,"moduleaddress":"0x75ef0000"}},"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","extraction_index":1417,"global_index":1417},{"event_type":"enhanced_load","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"load","category":null,"details":{"event":"load","object":"library","timestamp":"2026-07-19 16:33:26,449","eid":46,"data":{"file":null,"pathtofile":null,"moduleaddress":null}},"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","extraction_index":1418,"global_index":1418},{"event_type":"enhanced_load","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"load","category":null,"details":{"event":"load","object":"library","timestamp":"2026-07-19 16:33:26,449","eid":47,"data":{"file":"api-ms-win-core-localization-obsolete-l1-2-0","pathtofile":null,"moduleaddress":"0x75ef0000"}},"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","extraction_index":1419,"global_index":1419},{"event_type":"enhanced_load","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"load","category":null,"details":{"event":"load","object":"library","timestamp":"2026-07-19 16:33:26,449","eid":48,"data":{"file":null,"pathtofile":null,"moduleaddress":null}},"timestamp":"2026-07-19 16:33:26,449","timestamp_epoch":"2026-07-19 16:33:26,449","extraction_index":1420,"global_index":1420},{"event_type":"enhanced_load","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"load","category":null,"details":{"event":"load","object":"library","timestamp":"2026-07-19 16:33:26,496","eid":49,"data":{"file":"user32","pathtofile":null,"moduleaddress":"0x75cc0000"}},"timestamp":"2026-07-19 16:33:26,496","timestamp_epoch":"2026-07-19 16:33:26,496","extraction_index":1421,"global_index":1421},{"event_type":"enhanced_load","source":"behavior.enhanced","pid":null,"process_name":null,"event_name":"load","category":null,"details":{"event":"load","object":"library","timestamp":"2026-07-19 16:33:26,496","eid":50,"data":{"file":"C:\\Windows\\System32\\uxtheme.dll","pathtofile":null,"moduleaddress":"0x742e0000"}},"timestamp":"2026-07-19 16:33:26,496","timestamp_epoch":"2026-07-19 16:33:26,496","extraction_index":1422,"global_index":1422},{"event_type":"registry_read","source":"behavior.summary.read_keys","registry_key":"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\EnableLUA","timestamp":null,"timestamp_epoch":null,"extraction_index":1423,"global_index":1423},{"event_type":"registry_read","source":"behavior.summary.read_keys","registry_key":"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\SystemStartOptions","timestamp":null,"timestamp_epoch":null,"extraction_index":1424,"global_index":1424},{"event_type":"registry_read","source":"behavior.summary.read_keys","registry_key":"HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Class\\{4d36e968-e325-11ce-bfc1-08002be10318}\\0000\\DriverDesc","timestamp":null,"timestamp_epoch":null,"extraction_index":1425,"global_index":1425},{"event_type":"registry_read","source":"behavior.summary.read_keys","registry_key":"HKEY_LOCAL_MACHINE\\HARDWARE\\DESCRIPTION\\System\\SystemBiosVersion","timestamp":null,"timestamp_epoch":null,"extraction_index":1426,"global_index":1426},{"event_type":"registry_read","source":"behavior.summary.read_keys","registry_key":"HKEY_LOCAL_MACHINE\\HARDWARE\\DESCRIPTION\\System\\VideoBiosVersion","timestamp":null,"timestamp_epoch":null,"extraction_index":1427,"global_index":1427},{"event_type":"network_http","source":"network.http","uri":"http://77.111.102.204/phf/c/doc/ph/prod5/msdownload/update/software/secu/2025/09/1024/windows10.0-kb5066130-x64-ndp481_06046fee7e84fdb252bf0dfa0d51772ada5604be.cab.json?cacheHostOrigin=download.windowsupdate.com","host":"77.111.102.204","port":80,"method":"GET","status":null,"user_agent":"Microsoft-Delivery-Optimization/10.0","timestamp":null,"timestamp_epoch":null,"extraction_index":1428,"global_index":1428},{"event_type":"network_http","source":"network.http","uri":"http://77.111.102.204/filestreamingservice/files/f1337855-68c2-4367-9fa5-886ebd5dfcae/pieceshash?cacheHostOrigin=dl.delivery.mp.microsoft.com","host":"77.111.102.204","port":80,"method":"GET","status":null,"user_agent":"Microsoft-Delivery-Optimization/10.0","timestamp":null,"timestamp_epoch":null,"extraction_index":1429,"global_index":1429},{"event_type":"network_http","source":"network.http","uri":"http://77.111.102.204/filestreamingservice/files/f1337855-68c2-4367-9fa5-886ebd5dfcae?P1=1784458270&P2=404&P3=2&P4=EHz9e2HF6rq7UNI1YOaejbKdBmIcy91yaNfvzmOEOaeEMOlmq36MQDjnnNFltztOUut824myFEBlCe2HPB1Ojw%3d%3d&cacheHostOrigin=2.tlu.dl.delivery.mp.microsoft.com","host":"77.111.102.204","port":80,"method":"GET","status":null,"user_agent":"Microsoft-Delivery-Optimization/10.0","timestamp":null,"timestamp_epoch":null,"extraction_index":1430,"global_index":1430},{"event_type":"network_http","source":"network.http","uri":"http://77.111.102.204/filestreamingservice/files/f1337855-68c2-4367-9fa5-886ebd5dfcae?P1=1784458270&P2=404&P3=2&P4=EHz9e2HF6rq7UNI1YOaejbKdBmIcy91yaNfvzmOEOaeEMOlmq36MQDjnnNFltztOUut824myFEBlCe2HPB1Ojw%3d%3d&cacheHostOrigin=2.tlu.dl.delivery.mp.microsoft.com","host":"77.111.102.204","port":80,"method":"GET","status":null,"user_agent":"Microsoft-Delivery-Optimization/10.0","timestamp":null,"timestamp_epoch":null,"extraction_index":1431,"global_index":1431},{"event_type":"network_http","source":"network.http","uri":"http://77.111.102.204/filestreamingservice/files/4c2b79de-5d45-4930-9579-1b05b5deb11d/pieceshash?cacheHostOrigin=dl.delivery.mp.microsoft.com","host":"77.111.102.204","port":80,"method":"GET","status":null,"user_agent":"Microsoft-Delivery-Optimization/10.0","timestamp":null,"timestamp_epoch":null,"extraction_index":1432,"global_index":1432},{"event_type":"network_http","source":"network.http","uri":"http://77.111.102.204/filestreamingservice/files/4c2b79de-5d45-4930-9579-1b05b5deb11d?P1=1784454637&P2=404&P3=2&P4=hDZ2DTBbc5dcvhGCGNRRg3x1NOiEkaDSgDEhXHQbBJRVcQnsvQuPY7vNEwAcBsk0Kd%2bK06%2bYBqbirOzB%2bDkIRA%3d%3d&cacheHostOrigin=2.tlu.dl.delivery.mp.microsoft.com","host":"77.111.102.204","port":80,"method":"GET","status":null,"user_agent":"Microsoft-Delivery-Optimization/10.0","timestamp":null,"timestamp_epoch":null,"extraction_index":1433,"global_index":1433},{"event_type":"network_http","source":"network.http","uri":"http://77.111.102.204/filestreamingservice/files/4c2b79de-5d45-4930-9579-1b05b5deb11d?P1=1784454637&P2=404&P3=2&P4=hDZ2DTBbc5dcvhGCGNRRg3x1NOiEkaDSgDEhXHQbBJRVcQnsvQuPY7vNEwAcBsk0Kd%2bK06%2bYBqbirOzB%2bDkIRA%3d%3d&cacheHostOrigin=2.tlu.dl.delivery.mp.microsoft.com","host":"77.111.102.204","port":80,"method":"GET","status":null,"user_agent":"Microsoft-Delivery-Optimization/10.0","timestamp":null,"timestamp_epoch":null,"extraction_index":1434,"global_index":1434},{"event_type":"network_http","source":"network.http","uri":"http://77.111.102.204/filestreamingservice/files/3cbf0d18-5aeb-4798-9526-faae52adf62a/pieceshash?cacheHostOrigin=dl.delivery.mp.microsoft.com","host":"77.111.102.204","port":80,"method":"GET","status":null,"user_agent":"Microsoft-Delivery-Optimization/10.0","timestamp":null,"timestamp_epoch":null,"extraction_index":1435,"global_index":1435},{"event_type":"network_http","source":"network.http","uri":"http://77.111.102.204/filestreamingservice/files/3cbf0d18-5aeb-4798-9526-faae52adf62a?P1=1784455065&P2=404&P3=2&P4=cGBUQNv%2fUR%2foZRmh%2b%2fPRMHYCW%2bSjO14I3xeseKDGJDBCGFo9l4L7YVyX8eqXN0CEVAdR5F72GJn4vz4YNt6h7w%3d%3d&cacheHostOrigin=3.tlu.dl.delivery.mp.microsoft.com","host":"77.111.102.204","port":80,"method":"GET","status":null,"user_agent":"Microsoft-Delivery-Optimization/10.0","timestamp":null,"timestamp_epoch":null,"extraction_index":1436,"global_index":1436},{"event_type":"network_http","source":"network.http","uri":"http://77.111.102.204/filestreamingservice/files/3cbf0d18-5aeb-4798-9526-faae52adf62a?P1=1784455065&P2=404&P3=2&P4=cGBUQNv%2fUR%2foZRmh%2b%2fPRMHYCW%2bSjO14I3xeseKDGJDBCGFo9l4L7YVyX8eqXN0CEVAdR5F72GJn4vz4YNt6h7w%3d%3d&cacheHostOrigin=3.tlu.dl.delivery.mp.microsoft.com","host":"77.111.102.204","port":80,"method":"GET","status":null,"user_agent":"Microsoft-Delivery-Optimization/10.0","timestamp":null,"timestamp_epoch":null,"extraction_index":1437,"global_index":1437},{"event_type":"network_http","source":"network.http","uri":"http://77.111.102.204/filestreamingservice/files/3cbf0d18-5aeb-4798-9526-faae52adf62a?P1=1784455065&P2=404&P3=2&P4=cGBUQNv%2fUR%2foZRmh%2b%2fPRMHYCW%2bSjO14I3xeseKDGJDBCGFo9l4L7YVyX8eqXN0CEVAdR5F72GJn4vz4YNt6h7w%3d%3d&cacheHostOrigin=3.tlu.dl.delivery.mp.microsoft.com","host":"77.111.102.204","port":80,"method":"GET","status":null,"user_agent":"Microsoft-Delivery-Optimization/10.0","timestamp":null,"timestamp_epoch":null,"extraction_index":1438,"global_index":1438},{"event_type":"network_http","source":"network.http","uri":"http://77.111.102.204/filestreamingservice/files/c452d4ef-2486-4efe-9c99-36b3d23e0160/pieceshash?cacheHostOrigin=dl.delivery.mp.microsoft.com","host":"77.111.102.204","port":80,"method":"GET","status":null,"user_agent":"Microsoft-Delivery-Optimization/10.0","timestamp":null,"timestamp_epoch":null,"extraction_index":1439,"global_index":1439},{"event_type":"network_http","source":"network.http","uri":"http://77.111.102.204/filestreamingservice/files/c452d4ef-2486-4efe-9c99-36b3d23e0160?P1=1784454274&P2=404&P3=2&P4=h0WZbjA9HWGCCrTzaOStL50SSkALzOMpWGbq59%2f94ytLt%2f5Kg9lTi9Jc4UMpeoCfGhKpxB%2fW7yrx%2b6etRqNMkQ%3d%3d&cacheHostOrigin=3.tlu.dl.delivery.mp.microsoft.com","host":"77.111.102.204","port":80,"method":"GET","status":null,"user_agent":"Microsoft-Delivery-Optimization/10.0","timestamp":null,"timestamp_epoch":null,"extraction_index":1440,"global_index":1440},{"event_type":"network_http","source":"network.http","uri":"http://77.111.102.204/filestreamingservice/files/c452d4ef-2486-4efe-9c99-36b3d23e0160?P1=1784454274&P2=404&P3=2&P4=h0WZbjA9HWGCCrTzaOStL50SSkALzOMpWGbq59%2f94ytLt%2f5Kg9lTi9Jc4UMpeoCfGhKpxB%2fW7yrx%2b6etRqNMkQ%3d%3d&cacheHostOrigin=3.tlu.dl.delivery.mp.microsoft.com","host":"77.111.102.204","port":80,"method":"GET","status":null,"user_agent":"Microsoft-Delivery-Optimization/10.0","timestamp":null,"timestamp_epoch":null,"extraction_index":1441,"global_index":1441},{"event_type":"network_http","source":"network.http","uri":"http://77.111.102.204/filestreamingservice/files/9683459a-02fa-4bd6-9ae6-af8ddfbeef35/pieceshash?cacheHostOrigin=dl.delivery.mp.microsoft.com","host":"77.111.102.204","port":80,"method":"GET","status":null,"user_agent":"Microsoft-Delivery-Optimization/10.0","timestamp":null,"timestamp_epoch":null,"extraction_index":1442,"global_index":1442},{"event_type":"network_http","source":"network.http","uri":"http://77.111.102.204/filestreamingservice/files/9683459a-02fa-4bd6-9ae6-af8ddfbeef35?P1=1784454301&P2=404&P3=2&P4=hJnjfArBIvqhea%2fQ3QhLlkIyezN%2bbmtNmO2uKz2m4zjy1gfz2bmwb8mGKWQWv7ZxXaFtk2NFHh458uhFB7Xegw%3d%3d&cacheHostOrigin=3.tlu.dl.delivery.mp.microsoft.com","host":"77.111.102.204","port":80,"method":"GET","status":null,"user_agent":"Microsoft-Delivery-Optimization/10.0","timestamp":null,"timestamp_epoch":null,"extraction_index":1443,"global_index":1443},{"event_type":"network_http","source":"network.http","uri":"http://77.111.102.204/filestreamingservice/files/9683459a-02fa-4bd6-9ae6-af8ddfbeef35?P1=1784454301&P2=404&P3=2&P4=hJnjfArBIvqhea%2fQ3QhLlkIyezN%2bbmtNmO2uKz2m4zjy1gfz2bmwb8mGKWQWv7ZxXaFtk2NFHh458uhFB7Xegw%3d%3d&cacheHostOrigin=3.tlu.dl.delivery.mp.microsoft.com","host":"77.111.102.204","port":80,"method":"GET","status":null,"user_agent":"Microsoft-Delivery-Optimization/10.0","timestamp":null,"timestamp_epoch":null,"extraction_index":1444,"global_index":1444},{"event_type":"network_http","source":"network.http","uri":"http://77.111.102.204/filestreamingservice/files/f1337855-68c2-4367-9fa5-886ebd5dfcae?P1=1784458270&P2=404&P3=2&P4=EHz9e2HF6rq7UNI1YOaejbKdBmIcy91yaNfvzmOEOaeEMOlmq36MQDjnnNFltztOUut824myFEBlCe2HPB1Ojw%3d%3d&cacheHostOrigin=2.tlu.dl.delivery.mp.microsoft.com","host":"77.111.102.204","port":80,"method":"GET","status":null,"user_agent":"Microsoft-Delivery-Optimization/10.0","timestamp":null,"timestamp_epoch":null,"extraction_index":1445,"global_index":1445},{"event_type":"network_http","source":"network.http","uri":"http://77.111.102.204/filestreamingservice/files/f1337855-68c2-4367-9fa5-886ebd5dfcae?P1=1784458270&P2=404&P3=2&P4=EHz9e2HF6rq7UNI1YOaejbKdBmIcy91yaNfvzmOEOaeEMOlmq36MQDjnnNFltztOUut824myFEBlCe2HPB1Ojw%3d%3d&cacheHostOrigin=2.tlu.dl.delivery.mp.microsoft.com","host":"77.111.102.204","port":80,"method":"GET","status":null,"user_agent":"Microsoft-Delivery-Optimization/10.0","timestamp":null,"timestamp_epoch":null,"extraction_index":1446,"global_index":1446},{"event_type":"network_http","source":"network.http","uri":"http://77.111.102.204/filestreamingservice/files/4c2b79de-5d45-4930-9579-1b05b5deb11d?P1=1784454637&P2=404&P3=2&P4=hDZ2DTBbc5dcvhGCGNRRg3x1NOiEkaDSgDEhXHQbBJRVcQnsvQuPY7vNEwAcBsk0Kd%2bK06%2bYBqbirOzB%2bDkIRA%3d%3d&cacheHostOrigin=2.tlu.dl.delivery.mp.microsoft.com","host":"77.111.102.204","port":80,"method":"GET","status":null,"user_agent":"Microsoft-Delivery-Optimization/10.0","timestamp":null,"timestamp_epoch":null,"extraction_index":1447,"global_index":1447},{"event_type":"network_http","source":"network.http","uri":"http://77.111.102.204/filestreamingservice/files/3cbf0d18-5aeb-4798-9526-faae52adf62a?P1=1784455065&P2=404&P3=2&P4=cGBUQNv%2fUR%2foZRmh%2b%2fPRMHYCW%2bSjO14I3xeseKDGJDBCGFo9l4L7YVyX8eqXN0CEVAdR5F72GJn4vz4YNt6h7w%3d%3d&cacheHostOrigin=3.tlu.dl.delivery.mp.microsoft.com","host":"77.111.102.204","port":80,"method":"GET","status":null,"user_agent":"Microsoft-Delivery-Optimization/10.0","timestamp":null,"timestamp_epoch":null,"extraction_index":1448,"global_index":1448},{"event_type":"network_http","source":"network.http","uri":"http://77.111.102.204/filestreamingservice/files/9683459a-02fa-4bd6-9ae6-af8ddfbeef35?P1=1784454301&P2=404&P3=2&P4=hJnjfArBIvqhea%2fQ3QhLlkIyezN%2bbmtNmO2uKz2m4zjy1gfz2bmwb8mGKWQWv7ZxXaFtk2NFHh458uhFB7Xegw%3d%3d&cacheHostOrigin=3.tlu.dl.delivery.mp.microsoft.com","host":"77.111.102.204","port":80,"method":"GET","status":null,"user_agent":"Microsoft-Delivery-Optimization/10.0","timestamp":null,"timestamp_epoch":null,"extraction_index":1449,"global_index":1449},{"event_type":"network_http","source":"network.http","uri":"http://77.111.102.204/filestreamingservice/files/f1337855-68c2-4367-9fa5-886ebd5dfcae?P1=1784458270&P2=404&P3=2&P4=EHz9e2HF6rq7UNI1YOaejbKdBmIcy91yaNfvzmOEOaeEMOlmq36MQDjnnNFltztOUut824myFEBlCe2HPB1Ojw%3d%3d&cacheHostOrigin=2.tlu.dl.delivery.mp.microsoft.com","host":"77.111.102.204","port":80,"method":"GET","status":null,"user_agent":"Microsoft-Delivery-Optimization/10.0","timestamp":null,"timestamp_epoch":null,"extraction_index":1450,"global_index":1450},{"event_type":"network_http","source":"network.http","uri":"http://77.111.102.204/filestreamingservice/files/9683459a-02fa-4bd6-9ae6-af8ddfbeef35?P1=1784454301&P2=404&P3=2&P4=hJnjfArBIvqhea%2fQ3QhLlkIyezN%2bbmtNmO2uKz2m4zjy1gfz2bmwb8mGKWQWv7ZxXaFtk2NFHh458uhFB7Xegw%3d%3d&cacheHostOrigin=3.tlu.dl.delivery.mp.microsoft.com","host":"77.111.102.204","port":80,"method":"GET","status":null,"user_agent":"Microsoft-Delivery-Optimization/10.0","timestamp":null,"timestamp_epoch":null,"extraction_index":1451,"global_index":1451},{"event_type":"network_http","source":"network.http","uri":"http://77.111.102.204/filestreamingservice/files/f1337855-68c2-4367-9fa5-886ebd5dfcae?P1=1784458270&P2=404&P3=2&P4=EHz9e2HF6rq7UNI1YOaejbKdBmIcy91yaNfvzmOEOaeEMOlmq36MQDjnnNFltztOUut824myFEBlCe2HPB1Ojw%3d%3d&cacheHostOrigin=2.tlu.dl.delivery.mp.microsoft.com","host":"77.111.102.204","port":80,"method":"GET","status":null,"user_agent":"Microsoft-Delivery-Optimization/10.0","timestamp":null,"timestamp_epoch":null,"extraction_index":1452,"global_index":1452},{"event_type":"network_http","source":"network.http","uri":"http://77.111.102.204/filestreamingservice/files/c452d4ef-2486-4efe-9c99-36b3d23e0160?P1=1784454274&P2=404&P3=2&P4=h0WZbjA9HWGCCrTzaOStL50SSkALzOMpWGbq59%2f94ytLt%2f5Kg9lTi9Jc4UMpeoCfGhKpxB%2fW7yrx%2b6etRqNMkQ%3d%3d&cacheHostOrigin=3.tlu.dl.delivery.mp.microsoft.com","host":"77.111.102.204","port":80,"method":"GET","status":null,"user_agent":"Microsoft-Delivery-Optimization/10.0","timestamp":null,"timestamp_epoch":null,"extraction_index":1453,"global_index":1453},{"event_type":"network_http","source":"network.http","uri":"http://77.111.102.204/filestreamingservice/files/c452d4ef-2486-4efe-9c99-36b3d23e0160?P1=1784454274&P2=404&P3=2&P4=h0WZbjA9HWGCCrTzaOStL50SSkALzOMpWGbq59%2f94ytLt%2f5Kg9lTi9Jc4UMpeoCfGhKpxB%2fW7yrx%2b6etRqNMkQ%3d%3d&cacheHostOrigin=3.tlu.dl.delivery.mp.microsoft.com","host":"77.111.102.204","port":80,"method":"GET","status":null,"user_agent":"Microsoft-Delivery-Optimization/10.0","timestamp":null,"timestamp_epoch":null,"extraction_index":1454,"global_index":1454},{"event_type":"network_http","source":"network.http","uri":"http://77.111.102.204/filestreamingservice/files/f1337855-68c2-4367-9fa5-886ebd5dfcae?P1=1784458270&P2=404&P3=2&P4=EHz9e2HF6rq7UNI1YOaejbKdBmIcy91yaNfvzmOEOaeEMOlmq36MQDjnnNFltztOUut824myFEBlCe2HPB1Ojw%3d%3d&cacheHostOrigin=2.tlu.dl.delivery.mp.microsoft.com","host":"77.111.102.204","port":80,"method":"GET","status":null,"user_agent":"Microsoft-Delivery-Optimization/10.0","timestamp":null,"timestamp_epoch":null,"extraction_index":1455,"global_index":1455},{"event_type":"network_http","source":"network.http","uri":"http://77.111.102.204/filestreamingservice/files/f1337855-68c2-4367-9fa5-886ebd5dfcae?P1=1784458270&P2=404&P3=2&P4=EHz9e2HF6rq7UNI1YOaejbKdBmIcy91yaNfvzmOEOaeEMOlmq36MQDjnnNFltztOUut824myFEBlCe2HPB1Ojw%3d%3d&cacheHostOrigin=2.tlu.dl.delivery.mp.microsoft.com","host":"77.111.102.204","port":80,"method":"GET","status":null,"user_agent":"Microsoft-Delivery-Optimization/10.0","timestamp":null,"timestamp_epoch":null,"extraction_index":1456,"global_index":1456},{"event_type":"network_http","source":"network.http","uri":"http://77.111.102.204/filestreamingservice/files/f1337855-68c2-4367-9fa5-886ebd5dfcae?P1=1784458270&P2=404&P3=2&P4=EHz9e2HF6rq7UNI1YOaejbKdBmIcy91yaNfvzmOEOaeEMOlmq36MQDjnnNFltztOUut824myFEBlCe2HPB1Ojw%3d%3d&cacheHostOrigin=2.tlu.dl.delivery.mp.microsoft.com","host":"77.111.102.204","port":80,"method":"GET","status":null,"user_agent":"Microsoft-Delivery-Optimization/10.0","timestamp":null,"timestamp_epoch":null,"extraction_index":1457,"global_index":1457},{"event_type":"network_http","source":"network.http","uri":"http://77.111.102.204/filestreamingservice/files/f1337855-68c2-4367-9fa5-886ebd5dfcae?P1=1784458270&P2=404&P3=2&P4=EHz9e2HF6rq7UNI1YOaejbKdBmIcy91yaNfvzmOEOaeEMOlmq36MQDjnnNFltztOUut824myFEBlCe2HPB1Ojw%3d%3d&cacheHostOrigin=2.tlu.dl.delivery.mp.microsoft.com","host":"77.111.102.204","port":80,"method":"GET","status":null,"user_agent":"Microsoft-Delivery-Optimization/10.0","timestamp":null,"timestamp_epoch":null,"extraction_index":1458,"global_index":1458},{"event_type":"network_http","source":"network.http","uri":"http://77.111.102.204/filestreamingservice/files/9683459a-02fa-4bd6-9ae6-af8ddfbeef35?P1=1784454301&P2=404&P3=2&P4=hJnjfArBIvqhea%2fQ3QhLlkIyezN%2bbmtNmO2uKz2m4zjy1gfz2bmwb8mGKWQWv7ZxXaFtk2NFHh458uhFB7Xegw%3d%3d&cacheHostOrigin=3.tlu.dl.delivery.mp.microsoft.com","host":"77.111.102.204","port":80,"method":"GET","status":null,"user_agent":"Microsoft-Delivery-Optimization/10.0","timestamp":null,"timestamp_epoch":null,"extraction_index":1459,"global_index":1459},{"event_type":"network_http","source":"network.http","uri":"http://77.111.102.204/filestreamingservice/files/9683459a-02fa-4bd6-9ae6-af8ddfbeef35?P1=1784454301&P2=404&P3=2&P4=hJnjfArBIvqhea%2fQ3QhLlkIyezN%2bbmtNmO2uKz2m4zjy1gfz2bmwb8mGKWQWv7ZxXaFtk2NFHh458uhFB7Xegw%3d%3d&cacheHostOrigin=3.tlu.dl.delivery.mp.microsoft.com","host":"77.111.102.204","port":80,"method":"GET","status":null,"user_agent":"Microsoft-Delivery-Optimization/10.0","timestamp":null,"timestamp_epoch":null,"extraction_index":1460,"global_index":1460},{"event_type":"network_http","source":"network.http","uri":"http://77.111.102.204/filestreamingservice/files/c452d4ef-2486-4efe-9c99-36b3d23e0160?P1=1784454274&P2=404&P3=2&P4=h0WZbjA9HWGCCrTzaOStL50SSkALzOMpWGbq59%2f94ytLt%2f5Kg9lTi9Jc4UMpeoCfGhKpxB%2fW7yrx%2b6etRqNMkQ%3d%3d&cacheHostOrigin=3.tlu.dl.delivery.mp.microsoft.com","host":"77.111.102.204","port":80,"method":"GET","status":null,"user_agent":"Microsoft-Delivery-Optimization/10.0","timestamp":null,"timestamp_epoch":null,"extraction_index":1461,"global_index":1461},{"event_type":"network_http","source":"network.http","uri":"http://77.111.102.204/filestreamingservice/files/c452d4ef-2486-4efe-9c99-36b3d23e0160?P1=1784454274&P2=404&P3=2&P4=h0WZbjA9HWGCCrTzaOStL50SSkALzOMpWGbq59%2f94ytLt%2f5Kg9lTi9Jc4UMpeoCfGhKpxB%2fW7yrx%2b6etRqNMkQ%3d%3d&cacheHostOrigin=3.tlu.dl.delivery.mp.microsoft.com","host":"77.111.102.204","port":80,"method":"GET","status":null,"user_agent":"Microsoft-Delivery-Optimization/10.0","timestamp":null,"timestamp_epoch":null,"extraction_index":1462,"global_index":1462},{"event_type":"network_http","source":"network.http","uri":"http://77.111.102.204/filestreamingservice/files/bb9431ef-bcba-4e04-b990-a430e122f3f3/pieceshash?cacheHostOrigin=dl.delivery.mp.microsoft.com","host":"77.111.102.204","port":80,"method":"GET","status":null,"user_agent":"Microsoft-Delivery-Optimization/10.0","timestamp":null,"timestamp_epoch":null,"extraction_index":1463,"global_index":1463},{"event_type":"network_http","source":"network.http","uri":"http://77.111.102.204/filestreamingservice/files/bb9431ef-bcba-4e04-b990-a430e122f3f3?P1=1784454805&P2=404&P3=2&P4=BNl2j9EuIShzTZq0O2KE4c9giG8AZmRMQvPwy22WxOGtDTQkCXv52agskgfreJvY1y%2brZWBeVqZGX%2f8onXNT9A%3d%3d&cacheHostOrigin=3.tlu.dl.delivery.mp.microsoft.com","host":"77.111.102.204","port":80,"method":"GET","status":null,"user_agent":"Microsoft-Delivery-Optimization/10.0","timestamp":null,"timestamp_epoch":null,"extraction_index":1464,"global_index":1464},{"event_type":"network_http","source":"network.http","uri":"http://77.111.102.204/filestreamingservice/files/bb9431ef-bcba-4e04-b990-a430e122f3f3?P1=1784454805&P2=404&P3=2&P4=BNl2j9EuIShzTZq0O2KE4c9giG8AZmRMQvPwy22WxOGtDTQkCXv52agskgfreJvY1y%2brZWBeVqZGX%2f8onXNT9A%3d%3d&cacheHostOrigin=3.tlu.dl.delivery.mp.microsoft.com","host":"77.111.102.204","port":80,"method":"GET","status":null,"user_agent":"Microsoft-Delivery-Optimization/10.0","timestamp":null,"timestamp_epoch":null,"extraction_index":1465,"global_index":1465},{"event_type":"network_http","source":"network.http","uri":"http://77.111.102.204/filestreamingservice/files/ab314f6d-9771-4737-ad5b-08902b4814f9/pieceshash?cacheHostOrigin=dl.delivery.mp.microsoft.com","host":"77.111.102.204","port":80,"method":"GET","status":null,"user_agent":"Microsoft-Delivery-Optimization/10.0","timestamp":null,"timestamp_epoch":null,"extraction_index":1466,"global_index":1466},{"event_type":"network_http","source":"network.http","uri":"http://77.111.102.204/filestreamingservice/files/ab314f6d-9771-4737-ad5b-08902b4814f9?P1=1784454494&P2=404&P3=2&P4=dzpjnYkWDs3ys44BRDO%2bGy%2fAGtELvWvoAXhf4P9XmR7Z3KbFAFRRsmjPTCuC5tkF0m7K9Xnrxy0qloLG%2fyoNlA%3d%3d&cacheHostOrigin=4.tlu.dl.delivery.mp.microsoft.com","host":"77.111.102.204","port":80,"method":"GET","status":null,"user_agent":"Microsoft-Delivery-Optimization/10.0","timestamp":null,"timestamp_epoch":null,"extraction_index":1467,"global_index":1467},{"event_type":"network_http","source":"network.http","uri":"http://77.111.102.204/filestreamingservice/files/ab314f6d-9771-4737-ad5b-08902b4814f9?P1=1784454494&P2=404&P3=2&P4=dzpjnYkWDs3ys44BRDO%2bGy%2fAGtELvWvoAXhf4P9XmR7Z3KbFAFRRsmjPTCuC5tkF0m7K9Xnrxy0qloLG%2fyoNlA%3d%3d&cacheHostOrigin=4.tlu.dl.delivery.mp.microsoft.com","host":"77.111.102.204","port":80,"method":"GET","status":null,"user_agent":"Microsoft-Delivery-Optimization/10.0","timestamp":null,"timestamp_epoch":null,"extraction_index":1468,"global_index":1468},{"event_type":"network_http","source":"network.http","uri":"http://77.111.102.204/filestreamingservice/files/0092fb1c-d27f-429c-acdd-29b392ed3d33/pieceshash?cacheHostOrigin=dl.delivery.mp.microsoft.com","host":"77.111.102.204","port":80,"method":"GET","status":null,"user_agent":"Microsoft-Delivery-Optimization/10.0","timestamp":null,"timestamp_epoch":null,"extraction_index":1469,"global_index":1469},{"event_type":"network_tcp","source":"network.tcp","src":"10.152.152.11","dst":"77.111.102.204","sport":64019,"dport":80,"offset":2535377,"timestamp":null,"timestamp_epoch":null,"extraction_index":1470,"global_index":1470},{"event_type":"network_tcp","source":"network.tcp","src":"10.152.152.11","dst":"77.111.102.204","sport":64053,"dport":80,"offset":21256733,"timestamp":null,"timestamp_epoch":null,"extraction_index":1471,"global_index":1471},{"event_type":"network_tcp","source":"network.tcp","src":"10.152.152.11","dst":"77.111.102.204","sport":64054,"dport":80,"offset":21523426,"timestamp":null,"timestamp_epoch":null,"extraction_index":1472,"global_index":1472},{"event_type":"network_tcp","source":"network.tcp","src":"10.152.152.11","dst":"77.111.102.204","sport":64057,"dport":80,"offset":22215182,"timestamp":null,"timestamp_epoch":null,"extraction_index":1473,"global_index":1473},{"event_type":"network_tcp","source":"network.tcp","src":"10.152.152.11","dst":"77.111.102.204","sport":64059,"dport":80,"offset":22443697,"timestamp":null,"timestamp_epoch":null,"extraction_index":1474,"global_index":1474},{"event_type":"network_tcp","source":"network.tcp","src":"10.152.152.11","dst":"77.111.102.204","sport":64062,"dport":80,"offset":23815020,"timestamp":null,"timestamp_epoch":null,"extraction_index":1475,"global_index":1475},{"event_type":"network_tcp","source":"network.tcp","src":"10.152.152.11","dst":"77.111.102.204","sport":64064,"dport":80,"offset":24139458,"timestamp":null,"timestamp_epoch":null,"extraction_index":1476,"global_index":1476},{"event_type":"network_tcp","source":"network.tcp","src":"10.152.152.11","dst":"77.111.102.204","sport":64066,"dport":80,"offset":24434865,"timestamp":null,"timestamp_epoch":null,"extraction_index":1477,"global_index":1477},{"event_type":"network_tcp","source":"network.tcp","src":"10.152.152.11","dst":"77.111.102.204","sport":64068,"dport":80,"offset":25681945,"timestamp":null,"timestamp_epoch":null,"extraction_index":1478,"global_index":1478},{"event_type":"network_tcp","source":"network.tcp","src":"10.152.152.11","dst":"77.111.102.204","sport":64069,"dport":80,"offset":25986309,"timestamp":null,"timestamp_epoch":null,"extraction_index":1479,"global_index":1479},{"event_type":"network_tcp","source":"network.tcp","src":"10.152.152.11","dst":"77.111.102.204","sport":64071,"dport":80,"offset":26739165,"timestamp":null,"timestamp_epoch":null,"extraction_index":1480,"global_index":1480},{"event_type":"network_tcp","source":"network.tcp","src":"10.152.152.11","dst":"77.111.102.204","sport":64073,"dport":80,"offset":27040630,"timestamp":null,"timestamp_epoch":null,"extraction_index":1481,"global_index":1481},{"event_type":"network_tcp","source":"network.tcp","src":"10.152.152.11","dst":"77.111.102.204","sport":64075,"dport":80,"offset":28637619,"timestamp":null,"timestamp_epoch":null,"extraction_index":1482,"global_index":1482},{"event_type":"network_tcp","source":"network.tcp","src":"10.152.152.11","dst":"77.111.102.204","sport":64077,"dport":80,"offset":30485164,"timestamp":null,"timestamp_epoch":null,"extraction_index":1483,"global_index":1483},{"event_type":"network_tcp","source":"network.tcp","src":"10.152.152.11","dst":"77.111.102.204","sport":64078,"dport":80,"offset":33922591,"timestamp":null,"timestamp_epoch":null,"extraction_index":1484,"global_index":1484},{"event_type":"network_tcp","source":"network.tcp","src":"10.152.152.11","dst":"77.111.102.204","sport":64083,"dport":80,"offset":36661953,"timestamp":null,"timestamp_epoch":null,"extraction_index":1485,"global_index":1485},{"event_type":"network_tcp","source":"network.tcp","src":"10.152.152.11","dst":"77.111.102.204","sport":64085,"dport":80,"offset":36722876,"timestamp":null,"timestamp_epoch":null,"extraction_index":1486,"global_index":1486},{"event_type":"network_tcp","source":"network.tcp","src":"10.152.152.11","dst":"77.111.102.204","sport":64090,"dport":80,"offset":42656942,"timestamp":null,"timestamp_epoch":null,"extraction_index":1487,"global_index":1487},{"event_type":"network_tcp","source":"network.tcp","src":"10.152.152.11","dst":"77.111.102.204","sport":64093,"dport":80,"offset":44217663,"timestamp":null,"timestamp_epoch":null,"extraction_index":1488,"global_index":1488},{"event_type":"network_tcp","source":"network.tcp","src":"10.152.152.11","dst":"77.111.102.204","sport":64094,"dport":80,"offset":44614668,"timestamp":null,"timestamp_epoch":null,"extraction_index":1489,"global_index":1489},{"event_type":"network_tcp","source":"network.tcp","src":"10.152.152.11","dst":"77.111.102.204","sport":64098,"dport":80,"offset":49323328,"timestamp":null,"timestamp_epoch":null,"extraction_index":1490,"global_index":1490},{"event_type":"network_tcp","source":"network.tcp","src":"10.152.152.11","dst":"77.111.102.204","sport":64107,"dport":80,"offset":54062338,"timestamp":null,"timestamp_epoch":null,"extraction_index":1491,"global_index":1491},{"event_type":"network_tcp","source":"network.tcp","src":"10.152.152.11","dst":"77.111.102.204","sport":64113,"dport":80,"offset":56043351,"timestamp":null,"timestamp_epoch":null,"extraction_index":1492,"global_index":1492},{"event_type":"network_tcp","source":"network.tcp","src":"10.152.152.11","dst":"77.111.102.204","sport":64116,"dport":80,"offset":57482231,"timestamp":null,"timestamp_epoch":null,"extraction_index":1493,"global_index":1493},{"event_type":"network_tcp","source":"network.tcp","src":"10.152.152.11","dst":"77.111.102.204","sport":64119,"dport":80,"offset":57747636,"timestamp":null,"timestamp_epoch":null,"extraction_index":1494,"global_index":1494},{"event_type":"network_tcp","source":"network.tcp","src":"10.152.152.11","dst":"77.111.102.204","sport":64121,"dport":80,"offset":58457928,"timestamp":null,"timestamp_epoch":null,"extraction_index":1495,"global_index":1495},{"event_type":"network_tcp","source":"network.tcp","src":"10.152.152.11","dst":"77.111.102.204","sport":64124,"dport":80,"offset":58928267,"timestamp":null,"timestamp_epoch":null,"extraction_index":1496,"global_index":1496},{"event_type":"network_tcp","source":"network.tcp","src":"10.152.152.11","dst":"77.111.102.204","sport":64127,"dport":80,"offset":59200041,"timestamp":null,"timestamp_epoch":null,"extraction_index":1497,"global_index":1497},{"event_type":"signature_triggered","source":"signatures","name":"stealth_network","description":"Network activity detected but not expressed in monitor API logs","severity":1,"confidence":100,"weight":1,"categories":["stealth"],"families":[],"marks":[],"references":[],"alert":false,"timestamp":null,"timestamp_epoch":null,"extraction_index":1498,"global_index":1498},{"event_type":"signature_triggered","source":"signatures","name":"antidebug_setunhandledexceptionfilter","description":"SetUnhandledExceptionFilter detected (possible anti-debug)","severity":1,"confidence":40,"weight":1,"categories":["anti-debug"],"families":[],"marks":[],"references":[],"alert":false,"timestamp":null,"timestamp_epoch":null,"extraction_index":1499,"global_index":1499},{"event_type":"signature_triggered","source":"signatures","name":"mouse_movement_detect","description":"Checks for mouse movement","severity":2,"confidence":100,"weight":4,"categories":["anti-sandbox"],"families":[],"marks":[],"references":[],"alert":false,"timestamp":null,"timestamp_epoch":null,"extraction_index":1500,"global_index":1500},{"event_type":"signature_triggered","source":"signatures","name":"antisandbox_sleep","description":"A process attempted to delay the analysis task.","severity":2,"confidence":100,"weight":4,"categories":["anti-sandbox"],"families":[],"marks":[],"references":[],"alert":false,"timestamp":null,"timestamp_epoch":null,"extraction_index":1501,"global_index":1501},{"event_type":"signature_triggered","source":"signatures","name":"antianalysis_tls_section","description":"Contains .tls (Thread Local Storage) section","severity":2,"confidence":100,"weight":1,"categories":["anti-analysis"],"families":[],"marks":[],"references":[],"alert":false,"timestamp":null,"timestamp_epoch":null,"extraction_index":1502,"global_index":1502},{"event_type":"signature_triggered","source":"signatures","name":"network_cnc_http","description":"HTTP traffic contains suspicious features which may be indicative of malware related traffic","severity":2,"confidence":30,"weight":1,"categories":["network","c2"],"families":[],"marks":[],"references":[],"alert":false,"timestamp":null,"timestamp_epoch":null,"extraction_index":1503,"global_index":1503},{"event_type":"signature_triggered","source":"signatures","name":"network_http","description":"Performs some HTTP requests","severity":2,"confidence":30,"weight":1,"categories":["network"],"families":[],"marks":[],"references":[],"alert":false,"timestamp":null,"timestamp_epoch":null,"extraction_index":1504,"global_index":1504},{"event_type":"signature_triggered","source":"signatures","name":"packer_unknown_pe_section_name","description":"The binary contains an unknown PE section name indicative of packing","severity":2,"confidence":100,"weight":1,"categories":["packer"],"families":[],"marks":[],"references":[],"alert":false,"timestamp":null,"timestamp_epoch":null,"extraction_index":1505,"global_index":1505},{"event_type":"signature_triggered","source":"signatures","name":"packer_entropy","description":"The binary likely contains encrypted or compressed data","severity":2,"confidence":100,"weight":1,"categories":["packer"],"families":[],"marks":[],"references":["http://www.forensickb.com/2013/03/file-entropy-explained.html","http://virii.es/U/Using%20Entropy%20Analysis%20to%20Find%20Encrypted%20and%20Packed%20Malware.pdf"],"alert":false,"timestamp":null,"timestamp_epoch":null,"extraction_index":1506,"global_index":1506},{"event_type":"signature_triggered","source":"signatures","name":"injection_rwx","description":"Creates RWX memory","severity":2,"confidence":50,"weight":1,"categories":["injection"],"families":[],"marks":[],"references":[],"alert":false,"timestamp":null,"timestamp_epoch":null,"extraction_index":1507,"global_index":1507},{"event_type":"signature_triggered","source":"signatures","name":"binary_yara","description":"Binary file triggered multiple YARA rules","severity":3,"confidence":80,"weight":1,"categories":["static"],"families":[],"marks":[],"references":[],"alert":false,"timestamp":null,"timestamp_epoch":null,"extraction_index":1508,"global_index":1508},{"event_type":"signature_triggered","source":"signatures","name":"network_questionable_http_path","description":"Makes a suspicious HTTP request to a commonly exploitable directory with questionable file ext","severity":3,"confidence":100,"weight":1,"categories":["network"],"families":[],"marks":[],"references":[],"alert":false,"timestamp":null,"timestamp_epoch":null,"extraction_index":1509,"global_index":1509},{"event_type":"signature_triggered","source":"signatures","name":"procmem_yara","description":"Yara detections observed in process dumps, payloads or dropped files","severity":3,"confidence":100,"weight":4,"categories":["malware"],"families":[],"marks":[],"references":[],"alert":false,"timestamp":null,"timestamp_epoch":null,"extraction_index":1510,"global_index":1510},{"event_type":"signature_triggered","source":"signatures","name":"static_pe_anomaly","description":"Anomalous binary characteristics","severity":3,"confidence":80,"weight":1,"categories":["static"],"families":[],"marks":[],"references":[],"alert":false,"timestamp":null,"timestamp_epoch":null,"extraction_index":1511,"global_index":1511},{"event_type":"signature_triggered","source":"signatures","name":"antivm_generic_bios","description":"Checks the version of Bios, possibly for anti-virtualization","severity":3,"confidence":100,"weight":1,"categories":["anti-vm"],"families":[],"marks":[],"references":[],"alert":false,"timestamp":null,"timestamp_epoch":null,"extraction_index":1512,"global_index":1512},{"event_type":"signature_triggered","source":"signatures","name":"antivm_vbox_keys","description":"Detects VirtualBox through the presence of a registry key","severity":3,"confidence":100,"weight":1,"categories":["anti-vm"],"families":[],"marks":[],"references":[],"alert":false,"timestamp":null,"timestamp_epoch":null,"extraction_index":1513,"global_index":1513},{"event_type":"cape_payload_detected","source":"CAPE.payloads","name":"4e67def89976223d854719fbc0cd6b735411a4355fa5dea31e3c4b199dce1bfa","sha256":"4e67def89976223d854719fbc0cd6b735411a4355fa5dea31e3c4b199dce1bfa","md5":"ebd1189c947da0a7930f4cec63418235","cape_type":"Unpacked PE Image: 32-bit executable","cape_type_code":8,"pid":7964,"process_name":"rp-019f79b8d2487453a.exe","process_path":"C:\\Users\\0xKal\\AppData\\Local\\Temp\\rp-019f79b8d2487453a.exe","module_path":"C:\\Users\\0xKal\\AppData\\Local\\Temp\\rp-019f79b8d2487453a.exe","virtual_address":"0x00080000","yara_hits":["INDICATOR_EXE_Packed_Themida","vmdetect"],"timestamp":null,"timestamp_epoch":null,"extraction_index":1514,"global_index":1514}],"generated_at":"2026-07-19T09:47:43.547993+00:00","sample":{"sha256":"c9b4047be7c4b7190533db32c67b85fe51c1692cca1d36944ad2f4d554b9320a","md5":"1c7a02bb53ab156eb200122c93dde12f","name":"rp-019f79b8d2487453a.exe","cape_type":"","malscore":9,"malstatus":"Malicious"},"schema_version":"1.0","summary":{"total_events":1515,"timed_events":1370,"untimed_events":145,"event_type_counts":{"api_call":1371,"process_start":1,"process_tracked":1,"enhanced_load":44,"enhanced_read":6,"registry_read":5,"network_http":42,"network_tcp":28,"signature_triggered":16,"cape_payload_detected":1},"total_processes":1,"total_signatures":16,"total_cape_payloads":1,"total_network_hosts":1,"total_suricata_alerts":0}},{"_id":{"$oid":"6a5ca3f0b3bed57e0e7378e1"},"sha256":"bd20fcc313adbb44d82a033fbae527bc2b522b93ed80ba88ec0094644005df81","analysis_info":{"id":185,"version":"2.5","category":"file","package":"batch","started":"2026-07-19 08:32:04","ended":"2026-07-19 08:42:14","duration":610,"machine":{"id":154,"status":"stopping","name":"windows-10-sandbox-01","label":"windows-10-sandbox-01","platform":"windows","manager":"Proxmox","started_on":"2026-07-19 08:32:04","shutdown_on":"2026-07-19 08:37:38"},"route":"tor"},"generated_at":"2026-07-19T10:16:14.601856+00:00","gridfs_file_id":{"$oid":"6a5ca3f045ff9f78a74102b3"},"gridfs_filename":"event_timeline_bd20fcc313adbb44d82a033fbae527bc2b522b93ed80ba88ec0094644005df81.json","gridfs_size_bytes":203701068,"sample":{"sha256":"bd20fcc313adbb44d82a033fbae527bc2b522b93ed80ba88ec0094644005df81","md5":"010d62381199e3131b778a19b75d36df","name":"fmb1-019f7980e1867d5.bat","cape_type":"","malscore":10,"malstatus":null},"schema_version":"1.0","summary":{"total_events":227413,"timed_events":197923,"untimed_events":29490,"event_type_counts":{"api_call":197924,"process_start":2,"process_tracked":25,"enhanced_load":2922,"enhanced_read":20625,"enhanced_execute":48,"enhanced_write":375,"enhanced_delete":11,"enhanced_start":10,"enhanced_create":12,"enhanced_move":1,"file_write":92,"file_delete":15,"registry_write":98,"registry_delete":5,"registry_read":4670,"network_http":441,"network_tcp":41,"signature_triggered":49,"cape_payload_detected":3,"command_executed":30,"mutex_created":14},"total_processes":25,"total_signatures":49,"total_cape_payloads":3,"total_network_hosts":1,"total_suricata_alerts":0}},{"_id":{"$oid":"6a5ca4cab3bed57e0e7378e2"},"sha256":"72e3fb64a103033837ee52ff73f5c00b2a8536b363431cd1308e7ce00f26908a","analysis_info":{"id":190,"version":"2.5","category":"file","package":"exe","started":"2026-07-19 10:09:49","ended":"2026-07-19 10:15:20","duration":331,"machine":{"id":159,"status":"stopping","name":"windows-10-sandbox-01","label":"windows-10-sandbox-01","platform":"windows","manager":"Proxmox","started_on":"2026-07-19 10:09:49","shutdown_on":"2026-07-19 10:10:38"},"route":"tor"},"generated_at":"2026-07-19T10:19:54.100600+00:00","gridfs_file_id":{"$oid":"6a5ca4ca3aa47eef074048bf"},"gridfs_filename":"event_timeline_72e3fb64a103033837ee52ff73f5c00b2a8536b363431cd1308e7ce00f26908a.json","gridfs_size_bytes":1932837,"sample":{"sha256":"72e3fb64a103033837ee52ff73f5c00b2a8536b363431cd1308e7ce00f26908a","md5":"ae6c4adaf1a49825d656e1523e0e45a4","name":"rdls-019f79da669c717.exe","cape_type":"","malscore":8,"malstatus":"Malicious"},"schema_version":"1.0","summary":{"total_events":2243,"timed_events":1894,"untimed_events":349,"event_type_counts":{"api_call":1895,"process_start":1,"process_tracked":1,"enhanced_load":176,"enhanced_read":90,"registry_read":51,"network_http":1,"network_tcp":1,"signature_triggered":22,"cape_payload_detected":5},"total_processes":1,"total_signatures":22,"total_cape_payloads":5,"total_network_hosts":1,"total_suricata_alerts":0}},{"_id":{"$oid":"6a5ca603b3bed57e0e7378f1"},"sha256":"1e969173c001e524b7ef3a22c0fcb1cc834104c18b64beea1d0a8de14be52087","analysis_info":{"id":188,"version":"2.5","category":"file","package":"vbs","started":"2026-07-19 09:16:23","ended":"2026-07-19 09:26:34","duration":611,"machine":{"id":157,"status":"stopping","name":"windows-10-sandbox-01","label":"windows-10-sandbox-01","platform":"windows","manager":"Proxmox","started_on":"2026-07-19 09:16:23","shutdown_on":"2026-07-19 09:21:49"},"route":"tor"},"generated_at":"2026-07-19T10:25:06.299453+00:00","gridfs_file_id":{"$oid":"6a5ca603b1ccedf47b129ee0"},"gridfs_filename":"event_timeline_1e969173c001e524b7ef3a22c0fcb1cc834104c18b64beea1d0a8de14be52087.json","gridfs_size_bytes":146473346,"sample":{"sha256":"1e969173c001e524b7ef3a22c0fcb1cc834104c18b64beea1d0a8de14be52087","md5":"1ea6e01c9630479597cc0b581e3ba382","name":"rmc-019f79a977897ed3.vbs","cape_type":"","malscore":10,"malstatus":null},"schema_version":"1.0","summary":{"total_events":163236,"timed_events":141112,"untimed_events":22124,"event_type_counts":{"api_call":141113,"process_start":2,"process_tracked":22,"enhanced_read":14450,"enhanced_load":1530,"enhanced_write":332,"enhanced_create":11,"enhanced_execute":40,"enhanced_start":11,"enhanced_delete":10,"file_write":44,"file_delete":4,"registry_write":105,"registry_delete":5,"registry_read":5087,"network_http":319,"network_tcp":61,"signature_triggered":49,"cape_payload_detected":3,"command_executed":20,"mutex_created":18},"total_processes":22,"total_signatures":49,"total_cape_payloads":3,"total_network_hosts":2,"total_suricata_alerts":0}},{"_id":{"$oid":"6a5ca994b3bed57e0e7378f4"},"sha256":"0ab215f9653788c3943cbf7f60470cc02f351e192b34ef673c1fccdc6e3eda0d","analysis_info":{"id":191,"version":"2.5","category":"file","package":"exe","started":"2026-07-19 10:15:21","ended":"2026-07-19 10:25:59","duration":638,"machine":{"id":160,"status":"stopping","name":"windows-10-sandbox-01","label":"windows-10-sandbox-01","platform":"windows","manager":"Proxmox","started_on":"2026-07-19 10:15:21","shutdown_on":"2026-07-19 10:21:16"},"route":"tor"},"generated_at":"2026-07-19T10:40:15.061801+00:00","gridfs_file_id":{"$oid":"6a5ca993976471c12839bb41"},"gridfs_filename":"event_timeline_0ab215f9653788c3943cbf7f60470cc02f351e192b34ef673c1fccdc6e3eda0d.json","gridfs_size_bytes":534395633,"sample":{"sha256":"0ab215f9653788c3943cbf7f60470cc02f351e192b34ef673c1fccdc6e3eda0d","md5":"7dc7a5b9f906179d6a7d994b2f947a11","name":"am-019f79dabacf7a419.exe","cape_type":"Amadey Payload: 64-bit executable","malscore":10,"malstatus":"Malicious"},"schema_version":"1.0","summary":{"total_events":639406,"timed_events":534987,"untimed_events":104419,"event_type_counts":{"api_call":534988,"process_start":4,"process_tracked":80,"enhanced_load":6464,"enhanced_write":6873,"enhanced_read":70568,"enhanced_execute":153,"enhanced_start":11,"enhanced_create":635,"enhanced_delete":676,"enhanced_findwindow":13,"enhanced_move":8,"enhanced_copy":130,"file_write":516,"file_delete":436,"file_read":65,"registry_write":271,"registry_delete":33,"registry_read":16751,"network_dns":1,"network_http":310,"network_tcp":65,"signature_triggered":92,"cape_payload_detected":19,"command_executed":119,"mutex_created":125},"total_processes":80,"total_signatures":92,"total_cape_payloads":19,"total_network_hosts":3,"total_suricata_alerts":0}},{"_id":{"$oid":"6a5cafb0b3bed57e0e7378f9"},"sha256":"e632a474347f7e231beff070ce83413f9062dfc361fcdab25e0a3fb67a0326fc","analysis_info":{"id":192,"version":"2.5","category":"file","package":"exe","started":"2026-07-19 10:56:50","ended":"2026-07-19 11:01:50","duration":300,"machine":{"id":161,"status":"stopping","name":"windows-10-sandbox-01","label":"windows-10-sandbox-01","platform":"windows","manager":"Proxmox","started_on":"2026-07-19 10:56:50","shutdown_on":"2026-07-19 10:57:22"},"route":"tor"},"generated_at":"2026-07-19T11:06:24.083203+00:00","gridfs_file_id":{"$oid":"6a5cafb093a7187e2319cc5e"},"gridfs_filename":"event_timeline_e632a474347f7e231beff070ce83413f9062dfc361fcdab25e0a3fb67a0326fc.json","gridfs_size_bytes":1722809,"sample":{"sha256":"e632a474347f7e231beff070ce83413f9062dfc361fcdab25e0a3fb67a0326fc","md5":"f925f96907127bdead9ec8c026f0bf02","name":"at-019f7a056e6c71f0a.exe","cape_type":"","malscore":6,"malstatus":"Suspicious"},"schema_version":"1.0","summary":{"total_events":2004,"timed_events":1665,"untimed_events":339,"event_type_counts":{"api_call":1666,"process_start":1,"process_tracked":1,"enhanced_load":169,"enhanced_read":92,"registry_read":51,"network_http":1,"network_tcp":1,"signature_triggered":20,"cape_payload_detected":2},"total_processes":1,"total_signatures":20,"total_cape_payloads":2,"total_network_hosts":1,"total_suricata_alerts":0}},{"_id":{"$oid":"6a5d3042b3bed57e0e737910"},"sha256":"03e40798b193db7de556657be34522abb0a4bb6f74b2e71bb4b4af44dab6aa40","analysis_info":{"id":193,"version":"2.5","category":"file","package":"exe","started":"2026-07-19 19:40:53","ended":"2026-07-19 19:50:46","duration":593,"machine":{"id":162,"status":"stopping","name":"windows-10-sandbox-01","label":"windows-10-sandbox-01","platform":"windows","manager":"Proxmox","started_on":"2026-07-19 19:40:53","shutdown_on":"2026-07-19 19:46:17"},"route":"tor"},"generated_at":"2026-07-20T15:00:38.340777+00:00","gridfs_file_id":{"$oid":"6a5e3816c752b0ad9c0f00c2"},"gridfs_filename":"event_timeline_03e40798b193db7de556657be34522abb0a4bb6f74b2e71bb4b4af44dab6aa40.json","gridfs_size_bytes":8122010,"sample":{"sha256":"03e40798b193db7de556657be34522abb0a4bb6f74b2e71bb4b4af44dab6aa40","md5":"e445923a1525fcdd748e47a893c6b441","name":"03e40798b193db7de556.exe","cape_type":"","malscore":6,"malstatus":"Suspicious"},"schema_version":"1.0","summary":{"total_events":10816,"timed_events":9469,"untimed_events":1347,"event_type_counts":{"api_call":9470,"process_start":1,"process_tracked":2,"enhanced_read":292,"enhanced_load":114,"enhanced_create":4,"enhanced_write":489,"enhanced_execute":1,"file_write":27,"registry_read":9,"network_http":392,"signature_triggered":13,"command_executed":1,"mutex_created":1},"total_processes":2,"total_signatures":13,"total_cape_payloads":0,"total_network_hosts":0,"total_suricata_alerts":0}},{"_id":{"$oid":"6a5d3183b3bed57e0e73791e"},"sha256":"db8ce34cefcc83edd0e245844f35373828004706eb41f952ad0c2522e10e4b9c","analysis_info":{"id":195,"version":"2.5","category":"file","package":"exe","started":"2026-07-19 20:04:37","ended":"2026-07-19 20:14:41","duration":604,"machine":{"id":164,"status":"stopping","name":"windows-10-sandbox-01","label":"windows-10-sandbox-01","platform":"windows","manager":"Proxmox","started_on":"2026-07-19 20:04:37","shutdown_on":"2026-07-19 20:10:13"},"route":"tor"},"generated_at":"2026-07-19T20:20:18.774306+00:00","gridfs_file_id":{"$oid":"6a5d318354bc56df1307ba0d"},"gridfs_filename":"event_timeline_db8ce34cefcc83edd0e245844f35373828004706eb41f952ad0c2522e10e4b9c.json","gridfs_size_bytes":115385064,"sample":{"sha256":"db8ce34cefcc83edd0e245844f35373828004706eb41f952ad0c2522e10e4b9c","md5":"fce1b61c249b56a953c50a942eebfa91","name":"db8ce34cefcc83edd0e2.exe","cape_type":"","malscore":9,"malstatus":"Malicious"},"schema_version":"1.0","summary":{"total_events":143801,"timed_events":110963,"untimed_events":32838,"event_type_counts":{"api_call":110964,"process_start":5,"process_tracked":20,"enhanced_read":20626,"enhanced_load":2297,"enhanced_delete":19,"enhanced_create":242,"enhanced_write":938,"enhanced_findwindow":10,"enhanced_execute":27,"enhanced_move":2,"file_write":50,"file_delete":16,"registry_write":23,"registry_delete":2,"registry_read":8037,"network_dns":10,"network_http":389,"network_tcp":23,"signature_triggered":61,"cape_payload_detected":1,"command_executed":19,"mutex_created":20},"total_processes":20,"total_signatures":61,"total_cape_payloads":1,"total_network_hosts":4,"total_suricata_alerts":0}},{"_id":{"$oid":"6a5e03cbb3bed57e0e737924"},"sha256":"7132a14099e6824598c5899dea19a4b8f4d89683bb01774b402674da1d4fee2f","analysis_info":{"id":196,"version":"2.5","category":"file","package":"dll","started":"2026-07-20 11:01:52","ended":"2026-07-20 11:11:40","duration":588,"machine":{"id":165,"status":"stopping","name":"windows-10-sandbox-01","label":"windows-10-sandbox-01","platform":"windows","manager":"Proxmox","started_on":"2026-07-20 11:01:52","shutdown_on":"2026-07-20 11:07:12"},"route":"tor"},"generated_at":"2026-07-20T11:17:31.124683+00:00","gridfs_file_id":{"$oid":"6a5e03cb9eb873472e2b7244"},"gridfs_filename":"event_timeline_7132a14099e6824598c5899dea19a4b8f4d89683bb01774b402674da1d4fee2f.json","gridfs_size_bytes":2028,"sample":{"sha256":"7132a14099e6824598c5899dea19a4b8f4d89683bb01774b402674da1d4fee2f","md5":"584e516edb5fc2b79960940b18cd65b5","name":"7132a14099e6824598c5.exe","cape_type":"","malscore":0,"malstatus":"Failed"},"schema_version":"1.0","summary":{"total_events":2,"timed_events":0,"untimed_events":2,"event_type_counts":{"network_dns":1,"signature_triggered":1},"total_processes":0,"total_signatures":1,"total_cape_payloads":0,"total_network_hosts":0,"total_suricata_alerts":0}},{"_id":{"$oid":"6a5f5e9239c3725e311ebbff"},"sha256":"ca029c447aa12fd5e8e91a5debffcdde4cf78151ee15ee13da69200a3cc1663f","analysis_info":{"id":197,"version":"2.5","category":"file","package":"exe","started":"2026-07-21 11:34:26","ended":"2026-07-21 11:44:43","duration":617,"machine":{"id":166,"status":"stopping","name":"windows-10-sandbox-01","label":"windows-10-sandbox-01","platform":"windows","manager":"Proxmox","started_on":"2026-07-21 11:34:26","shutdown_on":"2026-07-21 11:40:21"},"route":"tor"},"generated_at":"2026-07-21T11:56:59.926752+00:00","gridfs_file_id":{"$oid":"6a5f5e8ea00ff13601a4e36b"},"gridfs_filename":"event_timeline_ca029c447aa12fd5e8e91a5debffcdde4cf78151ee15ee13da69200a3cc1663f.json","gridfs_size_bytes":369319215,"sample":{"sha256":"ca029c447aa12fd5e8e91a5debffcdde4cf78151ee15ee13da69200a3cc1663f","md5":"861e3af88bf1bcac9caf72bf16fa02b5","name":"ca029c447aa12fd5e8e9.exe","cape_type":"","malscore":9,"malstatus":"Malicious"},"schema_version":"1.0","summary":{"total_events":441124,"timed_events":359057,"untimed_events":82067,"event_type_counts":{"api_call":359058,"process_start":2,"process_tracked":35,"enhanced_load":4210,"enhanced_read":47928,"enhanced_write":1831,"enhanced_create":177,"enhanced_execute":118,"enhanced_copy":2,"enhanced_start":18,"enhanced_delete":6515,"enhanced_move":5,"file_write":132,"file_delete":428,"file_read":1,"registry_write":390,"registry_delete":5784,"registry_read":14143,"network_dns":1,"network_http":102,"network_tcp":26,"signature_triggered":78,"cape_payload_detected":13,"command_executed":94,"mutex_created":33},"total_processes":35,"total_signatures":78,"total_cape_payloads":13,"total_network_hosts":2,"total_suricata_alerts":0}},{"_id":{"$oid":"6a5fb07839c3725e311ebc10"},"sha256":"115a0313cc91d6bd04289153206752ba9576f08418583e826b546240940731ad","analysis_info":{"id":79,"version":"2.5","category":"file","package":"exe","started":"2026-07-21 17:31:44","ended":"2026-07-21 17:38:25","duration":401,"machine":{"id":77,"status":"stopping","name":"windows-10-sandbox-01","label":"windows-10-sandbox-01","platform":"windows","manager":"Proxmox","started_on":"2026-07-21 17:31:44","shutdown_on":"2026-07-21 17:37:34"},"route":"tor"},"generated_at":"2026-07-21T17:46:30.246027+00:00","gridfs_file_id":{"$oid":"6a5fb0773e8d2bfe28bd11ae"},"gridfs_filename":"event_timeline_115a0313cc91d6bd04289153206752ba9576f08418583e826b546240940731ad.json","gridfs_size_bytes":127997368,"sample":{"sha256":"115a0313cc91d6bd04289153206752ba9576f08418583e826b546240940731ad","md5":"1f2ce8a37d806b8e01e35917c64a3487","name":"DriverPack-Notifier-.exe","cape_type":"","malscore":9,"malstatus":"Malicious"},"schema_version":"1.0","summary":{"total_events":159038,"timed_events":125687,"untimed_events":33351,"event_type_counts":{"api_call":125688,"process_start":4,"process_tracked":20,"enhanced_read":20008,"enhanced_load":2160,"enhanced_create":275,"enhanced_write":902,"enhanced_execute":19,"enhanced_start":2,"enhanced_delete":5,"enhanced_findwindow":3,"enhanced_move":1,"file_write":104,"file_delete":7,"registry_write":31,"registry_delete":2,"registry_read":8984,"network_dns":5,"network_http":647,"network_tcp":46,"signature_triggered":60,"cape_payload_detected":15,"command_executed":23,"mutex_created":27},"total_processes":20,"total_signatures":60,"total_cape_payloads":15,"total_network_hosts":4,"total_suricata_alerts":0}},{"_id":{"$oid":"6a5fb10939c3725e311ebc11"},"sha256":"0659388dba26d26eada6d82ed38f22fb2b0a264d1cc4667cce7f4523c72d59be","analysis_info":{"id":80,"version":"2.5","category":"file","package":"exe","started":"2026-07-21 17:38:25","ended":"2026-07-21 17:45:06","duration":401,"machine":{"id":78,"status":"stopping","name":"windows-10-sandbox-01","label":"windows-10-sandbox-01","platform":"windows","manager":"Proxmox","started_on":"2026-07-21 17:38:25","shutdown_on":"2026-07-21 17:44:14"},"route":"tor"},"generated_at":"2026-07-21T17:48:57.239820+00:00","gridfs_file_id":{"$oid":"6a5fb1096a07c330ccb1bb07"},"gridfs_filename":"event_timeline_0659388dba26d26eada6d82ed38f22fb2b0a264d1cc4667cce7f4523c72d59be.json","gridfs_size_bytes":32049793,"sample":{"sha256":"0659388dba26d26eada6d82ed38f22fb2b0a264d1cc4667cce7f4523c72d59be","md5":"d663176b9297a432309140315169274c","name":"DriverPackNotifier-0.exe","cape_type":"","malscore":8,"malstatus":"Malicious"},"schema_version":"1.0","summary":{"total_events":34668,"timed_events":32058,"untimed_events":2610,"event_type_counts":{"api_call":32059,"process_start":3,"process_tracked":9,"enhanced_read":1026,"enhanced_load":675,"enhanced_execute":8,"enhanced_start":5,"enhanced_findwindow":1,"enhanced_write":40,"enhanced_delete":3,"file_write":7,"file_delete":1,"registry_write":16,"registry_delete":2,"registry_read":775,"network_dns":3,"network_tcp":3,"signature_triggered":15,"cape_payload_detected":1,"command_executed":8,"mutex_created":8},"total_processes":9,"total_signatures":15,"total_cape_payloads":1,"total_network_hosts":3,"total_suricata_alerts":0}},{"_id":{"$oid":"6a5fb56939c3725e311ebc1d"},"sha256":"0585547fd8fb93a98ff616249edfa78f28e2d0a57c56a8453d39c418935bf79a","analysis_info":{"id":79,"version":"2.5","category":"file","package":"lnk","started":"2026-07-21 17:58:29","ended":"2026-07-21 18:05:00","duration":391,"machine":{"id":77,"status":"stopping","name":"windows-10-sandbox-01","label":"windows-10-sandbox-01","platform":"windows","manager":"Proxmox","started_on":"2026-07-21 17:58:29","shutdown_on":"2026-07-21 18:04:06"},"route":"tor"},"generated_at":"2026-07-21T18:07:36.398512+00:00","gridfs_file_id":{"$oid":"6a5fb568a7490aebb4a6cdd6"},"gridfs_filename":"event_timeline_0585547fd8fb93a98ff616249edfa78f28e2d0a57c56a8453d39c418935bf79a.json","gridfs_size_bytes":72677105,"sample":{"sha256":"0585547fd8fb93a98ff616249edfa78f28e2d0a57c56a8453d39c418935bf79a","md5":"65282efc7cdef83801f918acf05762ce","name":"DOC-LJS1XI-019f85d42.lnk","cape_type":"","malscore":10,"malstatus":null},"schema_version":"1.0","summary":{"total_events":86733,"timed_events":70183,"untimed_events":16550,"event_type_counts":{"api_call":70184,"process_start":4,"process_tracked":14,"enhanced_read":11940,"enhanced_load":942,"enhanced_create":12,"enhanced_write":148,"enhanced_delete":14,"enhanced_execute":27,"enhanced_start":5,"enhanced_findwindow":15,"file_write":14,"file_delete":7,"registry_write":18,"registry_read":3314,"network_dns":1,"signature_triggered":37,"cape_payload_detected":4,"command_executed":13,"mutex_created":20},"total_processes":14,"total_signatures":37,"total_cape_payloads":4,"total_network_hosts":0,"total_suricata_alerts":0}},{"_id":{"$oid":"6a5fba7239c3725e311ebc30"},"sha256":"18ae5af757dc585b6bd461caaf7af264eeceb59983cf64f7312a9a6eec900396","analysis_info":{"id":80,"version":"2.5","category":"file","package":"exe","started":"2026-07-21 18:18:53","ended":"2026-07-21 18:25:27","duration":394,"machine":{"id":78,"status":"stopping","name":"windows-10-sandbox-01","label":"windows-10-sandbox-01","platform":"windows","manager":"Proxmox","started_on":"2026-07-21 18:18:53","shutdown_on":"2026-07-21 18:24:33"},"route":"tor"},"generated_at":"2026-07-21T18:29:05.597183+00:00","gridfs_file_id":{"$oid":"6a5fba71bb956be00853ef62"},"gridfs_filename":"event_timeline_18ae5af757dc585b6bd461caaf7af264eeceb59983cf64f7312a9a6eec900396.json","gridfs_size_bytes":34149489,"sample":{"sha256":"18ae5af757dc585b6bd461caaf7af264eeceb59983cf64f7312a9a6eec900396","md5":"11fbd8034e2c62a0b5dbe718cac49096","name":"Uninstall-019f85e6d6.exe","cape_type":"","malscore":8,"malstatus":"Malicious"},"schema_version":"1.0","summary":{"total_events":37293,"timed_events":33451,"untimed_events":3842,"event_type_counts":{"api_call":33452,"process_start":3,"process_tracked":9,"enhanced_read":1022,"enhanced_load":694,"enhanced_execute":8,"enhanced_start":4,"enhanced_findwindow":1,"enhanced_write":35,"enhanced_create":1,"enhanced_delete":3,"file_write":6,"file_delete":1,"registry_write":16,"registry_delete":2,"registry_read":765,"network_dns":3,"network_http":1168,"network_tcp":63,"signature_triggered":19,"cape_payload_detected":1,"command_executed":8,"mutex_created":9},"total_processes":9,"total_signatures":19,"total_cape_payloads":1,"total_network_hosts":3,"total_suricata_alerts":0}},{"_id":{"$oid":"6a5fbf5e39c3725e311ebc37"},"sha256":"e5f7f85644ce467afc6fc446a366a4e14aea9f5eff7540258cef64b18f07a0b4","analysis_info":{"id":81,"version":"2.5","category":"file","package":"pdf","started":"2026-07-21 18:45:32","ended":"2026-07-21 18:47:14","duration":102,"machine":{"id":79,"status":"stopping","name":"windows-10-sandbox-01","label":"windows-10-sandbox-01","platform":"windows","manager":"Proxmox","started_on":"2026-07-21 18:45:32","shutdown_on":"2026-07-21 18:46:21"},"route":"tor"},"generated_at":"2026-07-21T18:50:05.947585+00:00","gridfs_file_id":{"$oid":"6a5fbf5e429b00b39eba1304"},"gridfs_filename":"event_timeline_e5f7f85644ce467afc6fc446a366a4e14aea9f5eff7540258cef64b18f07a0b4.json","gridfs_size_bytes":10750773,"sample":{"sha256":"e5f7f85644ce467afc6fc446a366a4e14aea9f5eff7540258cef64b18f07a0b4","md5":"52c75b4847e21571318f45d5c2d0aa4d","name":"Analysis_Proc_Report.pdf","cape_type":"","malscore":8.3,"malstatus":null},"schema_version":"1.0","summary":{"total_events":13430,"timed_events":10384,"untimed_events":3046,"event_type_counts":{"api_call":10385,"process_start":1,"process_tracked":1,"enhanced_load":249,"enhanced_read":1868,"enhanced_findwindow":14,"enhanced_write":18,"enhanced_delete":1,"enhanced_create":1,"enhanced_execute":2,"file_write":2,"registry_write":7,"registry_read":858,"signature_triggered":12,"command_executed":2,"mutex_created":9},"total_processes":1,"total_signatures":12,"total_cape_payloads":0,"total_network_hosts":0,"total_suricata_alerts":0}}]