{
  "dur": 32.31355547904968,
  "events": [
    {
      "t": "net",
      "d": "R",
      "sz": 5,
      "n": 1,
      "ts": 1773785114886,
      "pid": 18852
    },
    {
      "t": "net",
      "d": "R",
      "sz": 75,
      "n": 2,
      "ts": 1773785114886,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 142,
      "tags": [
        "STR:   info 2026-03-17 22:05:14.886       lsvc  18852   2452   11   "
      ],
      "ts": 1773785114886,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 118,
      "tags": [
        "STR:   info 2026-03-17 22:05:14.886       lsvc  18852   2452    2   "
      ],
      "ts": 1773785114886,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 156,
      "tags": [
        "STR:   info 2026-03-17 22:05:14.887       lsvc  18852   2452    2   "
      ],
      "ts": 1773785114887,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 128,
      "tags": [
        "STR:   info 2026-03-17 22:05:14.887       lsvc  18852   2452  112   "
      ],
      "ts": 1773785114887,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 125,
      "tags": [
        "STR:   info 2026-03-17 22:05:14.887       lsvc  18852   2452  112   "
      ],
      "ts": 1773785114887,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 143,
      "tags": [
        "STR:   info 2026-03-17 22:05:14.887       lsvc  18852   2452  112   "
      ],
      "ts": 1773785114887,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 120,
      "tags": [
        "STR:   info 2026-03-17 22:05:14.887       lsvc  18852   2452  113   "
      ],
      "ts": 1773785114887,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 131,
      "tags": [
        "STR:   info 2026-03-17 22:05:14.889       lsvc  18852   2452  113   "
      ],
      "ts": 1773785114889,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 131,
      "tags": [
        "STR:   info 2026-03-17 22:05:14.889       lsvc  18852   2452  113   "
      ],
      "ts": 1773785114889,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 125,
      "tags": [
        "STR:   info 2026-03-17 22:05:14.889       lsvc  18852   2452  113   "
      ],
      "ts": 1773785114889,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 129,
      "tags": [
        "STR:   info 2026-03-17 22:05:14.889       lsvc  18852   2452  113   "
      ],
      "ts": 1773785114889,
      "pid": 18852
    },
    {
      "t": "net",
      "d": "S",
      "sz": 41,
      "n": 1,
      "ts": 1773785114889,
      "pid": 18852
    },
    {
      "t": "net",
      "d": "R",
      "sz": 5,
      "n": 3,
      "ts": 1773785114936,
      "pid": 18852
    },
    {
      "t": "net",
      "d": "R",
      "sz": 149,
      "n": 4,
      "ts": 1773785114936,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 141,
      "tags": [
        "STR:   info 2026-03-17 22:05:14.937       lsvc  18852   2452  113   "
      ],
      "ts": 1773785114937,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 153,
      "tags": [
        "STR:   info 2026-03-17 22:05:14.937       lsvc  18852   2452  113   "
      ],
      "ts": 1773785114937,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 170,
      "tags": [
        "STR:   info 2026-03-17 22:05:14.937       lsvc  18852   2452  113   "
      ],
      "ts": 1773785114937,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 129,
      "tags": [
        "STR:   info 2026-03-17 22:05:14.937       lsvc  18852   2452  113   "
      ],
      "ts": 1773785114937,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 139,
      "tags": [
        "STR:   info 2026-03-17 22:05:14.937       lsvc  18852   2452  113   "
      ],
      "ts": 1773785114937,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 117,
      "tags": [
        "STR:   info 2026-03-17 22:05:14.937       lsvc  18852   2452  113   "
      ],
      "ts": 1773785114937,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 116,
      "tags": [
        "STR:   info 2026-03-17 22:05:14.944       lsvc  18852   2452  113   "
      ],
      "ts": 1773785114944,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 157,
      "tags": [
        "STR:   info 2026-03-17 22:05:14.944       lsvc  18852   2452  113   "
      ],
      "ts": 1773785114944,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 134,
      "tags": [
        "STR:   info 2026-03-17 22:05:14.945       lsvc  18852   2452  113   "
      ],
      "ts": 1773785114945,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 150,
      "tags": [
        "STR:   info 2026-03-17 22:05:14.945       lsvc  18852   2452  113   "
      ],
      "ts": 1773785114945,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 132,
      "tags": [
        "STR:   info 2026-03-17 22:05:14.945       lsvc  18852   2452  113   "
      ],
      "ts": 1773785114945,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 130,
      "tags": [
        "STR:   info 2026-03-17 22:05:14.945       lsvc  18852   2452  113   "
      ],
      "ts": 1773785114945,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 151,
      "tags": [
        "STR:   info 2026-03-17 22:05:14.945       lsvc  18852   2452  113   "
      ],
      "ts": 1773785114945,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 133,
      "tags": [
        "STR:   info 2026-03-17 22:05:14.945       lsvc  18852   2452  113   "
      ],
      "ts": 1773785114945,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 133,
      "tags": [
        "STR:   info 2026-03-17 22:05:14.945       lsvc  18852   2452  113   "
      ],
      "ts": 1773785114945,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 146,
      "tags": [
        "STR:   info 2026-03-17 22:05:14.945       lsvc  18852   2452  113   "
      ],
      "ts": 1773785114945,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 155,
      "tags": [
        "STR:   info 2026-03-17 22:05:14.945       lsvc  18852   2452  113   "
      ],
      "ts": 1773785114946,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 122,
      "tags": [
        "STR:   info 2026-03-17 22:05:14.946       lsvc  18852   2452  113   "
      ],
      "ts": 1773785114946,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 133,
      "tags": [
        "STR:   info 2026-03-17 22:05:14.946       lsvc  18852   2452  113   "
      ],
      "ts": 1773785114946,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 125,
      "tags": [
        "STR:warning 2026-03-17 22:05:14.946       lsvc  18852   2452  113   "
      ],
      "ts": 1773785114946,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 130,
      "tags": [
        "STR:   info 2026-03-17 22:05:14.946       lsvc  18852   2452  113   "
      ],
      "ts": 1773785114946,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 125,
      "tags": [
        "STR:   info 2026-03-17 22:05:14.946       lsvc  18852   2452  113   "
      ],
      "ts": 1773785114946,
      "pid": 18852
    },
    {
      "t": "net",
      "d": "S",
      "sz": 109,
      "n": 2,
      "ts": 1773785114947,
      "pid": 18852
    },
    {
      "t": "net",
      "d": "S",
      "sz": 37,
      "n": 3,
      "ts": 1773785114947,
      "pid": 18852
    },
    {
      "t": "net",
      "d": "R",
      "sz": 5,
      "n": 5,
      "ts": 1773785114962,
      "pid": 18852
    },
    {
      "t": "net",
      "d": "R",
      "sz": 22,
      "n": 6,
      "ts": 1773785114962,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 127,
      "tags": [
        "STR:   info 2026-03-17 22:05:14.962       lsvc  18852   2452  113   "
      ],
      "ts": 1773785114962,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 122,
      "tags": [
        "STR:   info 2026-03-17 22:05:14.962       lsvc  18852   2452  113   "
      ],
      "ts": 1773785114962,
      "pid": 18852
    },
    {
      "t": "net",
      "d": "R",
      "sz": 5,
      "n": 7,
      "ts": 1773785114976,
      "pid": 18852
    },
    {
      "t": "net",
      "d": "R",
      "sz": 22,
      "n": 8,
      "ts": 1773785114976,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 130,
      "tags": [
        "STR:   info 2026-03-17 22:05:14.976       lsvc  18852   2452  113   "
      ],
      "ts": 1773785114976,
      "pid": 18852
    },
    {
      "t": "net",
      "d": "S",
      "sz": 27,
      "n": 4,
      "ts": 1773785114977,
      "pid": 18852
    },
    {
      "t": "net",
      "d": "R",
      "sz": 5,
      "n": 9,
      "ts": 1773785114977,
      "pid": 18852
    },
    {
      "t": "net",
      "d": "R",
      "sz": 7854,
      "n": 10,
      "ts": 1773785114977,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 124,
      "tags": [
        "STR:   info 2026-03-17 22:05:14.986       lsvc  18852   2452  112   "
      ],
      "ts": 1773785114986,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 170,
      "tags": [
        "STR:   info 2026-03-17 22:05:14.999       lsvc  18852   2452  112   "
      ],
      "ts": 1773785114999,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 167,
      "tags": [
        "STR:   info 2026-03-17 22:05:14.999       lsvc  18852   2452  112   "
      ],
      "ts": 1773785114999,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 131,
      "tags": [
        "STR:   info 2026-03-17 22:05:14.999       lsvc  18852   2452  112   "
      ],
      "ts": 1773785114999,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 153,
      "tags": [
        "STR:   info 2026-03-17 22:05:15.076       lsvc  18852   2452  112   "
      ],
      "ts": 1773785115076,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 136,
      "tags": [
        "STR:   info 2026-03-17 22:05:15.076       lsvc  18852   2452  112   "
      ],
      "ts": 1773785115076,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 140,
      "tags": [
        "STR:   info 2026-03-17 22:05:15.076       lsvc  18852   2452  112   "
      ],
      "ts": 1773785115076,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 146,
      "tags": [
        "STR:   info 2026-03-17 22:05:15.076       lsvc  18852   2452  112   "
      ],
      "ts": 1773785115076,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 225,
      "tags": [
        "STR:   info 2026-03-17 22:05:15.077       lsvc  18852   2452  112   "
      ],
      "ts": 1773785115077,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 147,
      "tags": [
        "STR:   info 2026-03-17 22:05:15.077       lsvc  18852   2452  112   "
      ],
      "ts": 1773785115077,
      "pid": 18852
    },
    {
      "t": "file",
      "op": "Create",
      "path": "C:\\Users\\Mes\\Downloads\\AnyDesk.exe",
      "w": false,
      "c": false,
      "fl": [],
      "ts": 1773785115081,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 131,
      "tags": [
        "STR:   info 2026-03-17 22:05:15.084       lsvc  18852   2452  112   "
      ],
      "ts": 1773785115084,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 117,
      "tags": [
        "STR:   info 2026-03-17 22:05:15.084       lsvc  18852   2452  112   "
      ],
      "ts": 1773785115084,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 128,
      "tags": [
        "STR:   info 2026-03-17 22:05:15.084       lsvc  18852   2452  112   "
      ],
      "ts": 1773785115084,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 129,
      "tags": [
        "STR:   info 2026-03-17 22:05:15.087       lsvc  18852   2452  112   "
      ],
      "ts": 1773785115087,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 138,
      "tags": [
        "STR:   info 2026-03-17 22:05:15.087       lsvc  18852   2452  112   "
      ],
      "ts": 1773785115087,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 136,
      "tags": [
        "STR:   info 2026-03-17 22:05:15.089       lsvc  18852   2452  112   "
      ],
      "ts": 1773785115089,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 132,
      "tags": [
        "STR:   info 2026-03-17 22:05:15.089       lsvc  18852   2452    2   "
      ],
      "ts": 1773785115089,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 118,
      "tags": [
        "STR:   info 2026-03-17 22:05:15.914       lsvc  18852   2452    2   "
      ],
      "ts": 1773785115914,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 153,
      "tags": [
        "STR:   info 2026-03-17 22:05:15.914       lsvc  18852   2452    2   "
      ],
      "ts": 1773785115914,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 129,
      "tags": [
        "STR:   info 2026-03-17 22:05:15.916       lsvc  18852   2452  115   "
      ],
      "ts": 1773785115916,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 130,
      "tags": [
        "STR:   info 2026-03-17 22:05:15.917       lsvc  18852   2452  115   "
      ],
      "ts": 1773785115917,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 122,
      "tags": [
        "STR:   info 2026-03-17 22:05:15.920       lsvc  18852   2452  115   "
      ],
      "ts": 1773785115920,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 126,
      "tags": [
        "STR:   info 2026-03-17 22:05:16.163       lsvc  18852   2452  112   "
      ],
      "ts": 1773785116163,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 137,
      "tags": [
        "STR:   info 2026-03-17 22:05:16.240       lsvc  18852   2452  112   "
      ],
      "ts": 1773785116240,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 123,
      "tags": [
        "STR:   info 2026-03-17 22:05:16.240       lsvc  18852   2452  112   "
      ],
      "ts": 1773785116240,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 122,
      "tags": [
        "STR:   info 2026-03-17 22:05:16.242       lsvc  18852   2452  112   "
      ],
      "ts": 1773785116242,
      "pid": 18852
    },
    {
      "t": "net",
      "d": "S",
      "sz": 4132,
      "n": 5,
      "ts": 1773785116246,
      "pid": 18852
    },
    {
      "t": "net",
      "d": "S",
      "sz": 4128,
      "n": 6,
      "ts": 1773785116246,
      "pid": 18852
    },
    {
      "t": "net",
      "d": "S",
      "sz": 3238,
      "n": 7,
      "ts": 1773785116246,
      "pid": 18852
    },
    {
      "t": "net",
      "d": "R",
      "sz": 5,
      "n": 11,
      "ts": 1773785116266,
      "pid": 18852
    },
    {
      "t": "net",
      "d": "R",
      "sz": 39,
      "n": 12,
      "ts": 1773785116266,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 141,
      "tags": [
        "STR:   auth 2026-03-17 22:05:17.927       lsvc  18852   2452  112   "
      ],
      "ts": 1773785117927,
      "pid": 18852
    },
    {
      "t": "net",
      "d": "S",
      "sz": 34,
      "n": 8,
      "ts": 1773785117928,
      "pid": 18852
    },
    {
      "t": "net",
      "d": "S",
      "sz": 32,
      "n": 9,
      "ts": 1773785117928,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 119,
      "tags": [
        "STR:   info 2026-03-17 22:05:17.928       lsvc  18852   2452    2   "
      ],
      "ts": 1773785117928,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 117,
      "tags": [
        "STR:   info 2026-03-17 22:05:21.001       lsvc  18852   2452  115   "
      ],
      "ts": 1773785121001,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 116,
      "tags": [
        "STR:   info 2026-03-17 22:05:24.004       lsvc  18852   2452  115   "
      ],
      "ts": 1773785124004,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 149,
      "tags": [
        "STR:   info 2026-03-17 22:05:27.015       lsvc  18852   2452        "
      ],
      "ts": 1773785127015,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 118,
      "tags": [
        "STR:   info 2026-03-17 22:05:30.027       lsvc  18852   2452  112   "
      ],
      "ts": 1773785130027,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 141,
      "tags": [
        "STR:   info 2026-03-17 22:05:33.029       lsvc  18852   2452  112   "
      ],
      "ts": 1773785133029,
      "pid": 18852
    },
    {
      "t": "write",
      "sz": 118,
      "tags": [
        "STR:   info 2026-03-17 22:05:36.033       lsvc  18852   2452  112   "
      ],
      "ts": 1773785136033,
      "pid": 18852
    },
    {
      "t": "file",
      "op": "Create",
      "path": "C:\\Users\\desktop.ini",
      "w": false,
      "c": false,
      "fl": [],
      "ts": 1773785136035,
      "pid": 18852
    },
    {
      "t": "file",
      "op": "Create",
      "path": "C:\\Users\\Mes\\Downloads\\desktop.ini",
      "w": false,
      "c": false,
      "fl": [],
      "ts": 1773785136036,
      "pid": 18852
    },
    {
      "t": "file",
      "op": "Create",
      "path": "C:\\Users\\Mes\\Downloads",
      "w": false,
      "c": false,
      "fl": [],
      "ts": 1773785136037,
      "pid": 18852
    },
    {
      "t": "file",
      "op": "Create",
      "path": "C:\\Users\\Mes\\Downloads\\AnyDesk.exe\\",
      "w": false,
      "c": false,
      "fl": [],
      "ts": 1773785136045,
      "pid": 18852
    },
    {
      "t": "file",
      "op": "Create",
      "path": "C:\\Users\\Mes\\Downloads\\",
      "w": false,
      "c": false,
      "fl": [],
      "ts": 1773785136045,
      "pid": 18852
    },
    {
      "t": "file",
      "op": "Create",
      "path": "C:\\Users\\Mes\\Downloads\\",
      "w": false,
      "c": false,
      "fl": [],
      "ts": 1773785136045,
      "pid": 18852
    }
  ]
}