Loading ...

Play interactive tourEdit tour

Windows Analysis Report packing list commercial invoice and bl termplate draft for export.exe

Overview

General Information

Sample Name:packing list commercial invoice and bl termplate draft for export.exe
Analysis ID:483686
MD5:ddf2ae4b85ec6e277713ba1b5c844ed7
SHA1:b07236d7dcd264152bdb989840c2b78bdfd84764
SHA256:34c8be34215e94bd3ffab958ea56583ef0e40adcfa306609a2cb275e3e552d8f
Tags:AgentTeslaexeInvoice
Infos:

Most interesting Screenshot:

Detection

AgentTesla
Score:100
Range:0 - 100
Whitelisted:false
Confidence:100%

Signatures

Found malware configuration
Snort IDS alert for network traffic (e.g. based on Emerging Threat rules)
Multi AV Scanner detection for submitted file
Yara detected AgentTesla
Initial sample is a PE file and has a suspicious name
Tries to harvest and steal Putty / WinSCP information (sessions, passwords, etc)
Machine Learning detection for sample
.NET source code contains potential unpacker
.NET source code contains very large strings
Machine Learning detection for dropped file
Queries sensitive network adapter information (via WMI, Win32_NetworkAdapter, often done to detect virtual machines)
Uses schtasks.exe or at.exe to add and modify task schedules
Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)
Uses 32bit PE files
Queries the volume information (name, serial number etc) of a device
Antivirus or Machine Learning detection for unpacked file
May sleep (evasive loops) to hinder dynamic analysis
Detected potential crypto function
Sample execution stops while process was sleeping (likely an evasion)
Yara detected Credential Stealer
Creates processes with suspicious names
Contains long sleeps (>= 3 min)
Enables debug privileges
Found a high number of Window / User specific system calls (may be a loop to detect user behavior)
Sample file is different than original file name gathered from version info
Drops PE files
Queries sensitive processor information (via WMI, Win32_Processor, often done to detect virtual machines)
Creates a process in suspended mode (likely to inject code)

Classification

Process Tree

  • System is w10x64
  • cleanup

Malware Configuration

Threatname: Agenttesla

{"Exfil Mode": "SMTP", "Username": "sales4@italfood.ae", "Password": "Sales@634@$", "Host": "mail.italfood.ae"}

Yara Overview

Memory Dumps

SourceRuleDescriptionAuthorStrings
00000009.00000002.931203784.0000000000402000.00000040.00000001.sdmpJoeSecurity_AgentTesla_1Yara detected AgentTeslaJoe Security
    00000009.00000002.931203784.0000000000402000.00000040.00000001.sdmpJoeSecurity_AgentTesla_2Yara detected AgentTeslaJoe Security
      00000009.00000002.933232285.0000000003211000.00000004.00000001.sdmpJoeSecurity_AgentTesla_1Yara detected AgentTeslaJoe Security
        00000009.00000002.933232285.0000000003211000.00000004.00000001.sdmpJoeSecurity_CredentialStealerYara detected Credential StealerJoe Security
          Process Memory Space: packing list commercial invoice and bl termplate draft for export.exe PID: 6588JoeSecurity_AgentTesla_1Yara detected AgentTeslaJoe Security
            Click to see the 1 entries

            Unpacked PEs

            SourceRuleDescriptionAuthorStrings
            9.2.packing list commercial invoice and bl termplate draft for export.exe.400000.0.unpackJoeSecurity_AgentTesla_1Yara detected AgentTeslaJoe Security
              9.2.packing list commercial invoice and bl termplate draft for export.exe.400000.0.unpackJoeSecurity_AgentTesla_2Yara detected AgentTeslaJoe Security

                Sigma Overview

                No Sigma rule has matched

                Jbx Signature Overview

                Click to jump to signature section

                Show All Signature Results

                AV Detection:

                barindex
                Found malware configurationShow sources
                Source: 9.2.packing list commercial invoice and bl termplate draft for export.exe.400000.0.unpackMalware Configuration Extractor: Agenttesla {"Exfil Mode": "SMTP", "Username": "sales4@italfood.ae", "Password": "Sales@634@$", "Host": "mail.italfood.ae"}
                Multi AV Scanner detection for submitted fileShow sources
                Source: packing list commercial invoice and bl termplate draft for export.exeVirustotal: Detection: 44%Perma Link
                Machine Learning detection for sampleShow sources
                Source: packing list commercial invoice and bl termplate draft for export.exeJoe Sandbox ML: detected
                Machine Learning detection for dropped fileShow sources
                Source: C:\Users\user\AppData\Roaming\wVhpvdZWIB.exeJoe Sandbox ML: detected
                Source: 9.2.packing list commercial invoice and bl termplate draft for export.exe.400000.0.unpackAvira: Label: TR/Spy.Gen8
                Source: packing list commercial invoice and bl termplate draft for export.exeStatic PE information: 32BIT_MACHINE, EXECUTABLE_IMAGE
                Source: packing list commercial invoice and bl termplate draft for export.exeStatic PE information: NO_SEH, TERMINAL_SERVER_AWARE, DYNAMIC_BASE, NX_COMPAT

                Networking:

                barindex
                Snort IDS alert for network traffic (e.g. based on Emerging Threat rules)Show sources
                Source: TrafficSnort IDS: 2030171 ET TROJAN AgentTesla Exfil Via SMTP 192.168.2.4:49817 -> 185.243.77.210:587
                Source: packing list commercial invoice and bl termplate draft for export.exe, 00000009.00000002.933232285.0000000003211000.00000004.00000001.sdmpString found in binary or memory: http://127.0.0.1:HTTP/1.1
                Source: packing list commercial invoice and bl termplate draft for export.exe, 00000009.00000002.933232285.0000000003211000.00000004.00000001.sdmpString found in binary or memory: http://DynDns.comDynDNS
                Source: packing list commercial invoice and bl termplate draft for export.exe, 00000009.00000002.933232285.0000000003211000.00000004.00000001.sdmp, packing list commercial invoice and bl termplate draft for export.exe, 00000009.00000002.933666233.0000000003562000.00000004.00000001.sdmpString found in binary or memory: http://Q1q5wm8CcDOVVgnVHl2.net
                Source: packing list commercial invoice and bl termplate draft for export.exe, 00000009.00000002.933693229.000000000356A000.00000004.00000001.sdmpString found in binary or memory: http://italfood.ae
                Source: packing list commercial invoice and bl termplate draft for export.exe, 00000009.00000002.933693229.000000000356A000.00000004.00000001.sdmpString found in binary or memory: http://mail.italfood.ae
                Source: packing list commercial invoice and bl termplate draft for export.exe, 00000009.00000002.933232285.0000000003211000.00000004.00000001.sdmpString found in binary or memory: http://pUvlwI.com
                Source: packing list commercial invoice and bl termplate draft for export.exe, 00000000.00000003.671838520.0000000005E78000.00000004.00000001.sdmpString found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
                Source: packing list commercial invoice and bl termplate draft for export.exe, 00000000.00000003.668944781.0000000005E7B000.00000004.00000001.sdmpString found in binary or memory: http://www.fonts.com
                Source: packing list commercial invoice and bl termplate draft for export.exe, 00000000.00000003.668944781.0000000005E7B000.00000004.00000001.sdmpString found in binary or memory: http://www.fonts.comc
                Source: packing list commercial invoice and bl termplate draft for export.exe, 00000000.00000003.670606758.0000000005E6E000.00000004.00000001.sdmpString found in binary or memory: http://www.founder.com.cn/cnantE3&
                Source: packing list commercial invoice and bl termplate draft for export.exe, 00000000.00000003.670606758.0000000005E6E000.00000004.00000001.sdmpString found in binary or memory: http://www.founder.com.cn/cntte12z
                Source: packing list commercial invoice and bl termplate draft for export.exe, 00000000.00000003.675566665.0000000005E6A000.00000004.00000001.sdmpString found in binary or memory: http://www.galapagosdesign.com/staff/dennis.htmQ$
                Source: packing list commercial invoice and bl termplate draft for export.exe, 00000000.00000003.675185471.0000000005E6A000.00000004.00000001.sdmpString found in binary or memory: http://www.itcfonts.
                Source: packing list commercial invoice and bl termplate draft for export.exe, 00000000.00000003.673342532.0000000005E6C000.00000004.00000001.sdmpString found in binary or memory: http://www.jiyu-kobo.co.jp/
                Source: packing list commercial invoice and bl termplate draft for export.exe, 00000000.00000003.673626995.0000000005E6A000.00000004.00000001.sdmpString found in binary or memory: http://www.jiyu-kobo.co.jp//t
                Source: packing list commercial invoice and bl termplate draft for export.exe, 00000000.00000003.673342532.0000000005E6C000.00000004.00000001.sdmpString found in binary or memory: http://www.jiyu-kobo.co.jp/5
                Source: packing list commercial invoice and bl termplate draft for export.exe, 00000000.00000003.673390206.0000000005E69000.00000004.00000001.sdmpString found in binary or memory: http://www.jiyu-kobo.co.jp/C
                Source: packing list commercial invoice and bl termplate draft for export.exe, 00000000.00000003.673342532.0000000005E6C000.00000004.00000001.sdmpString found in binary or memory: http://www.jiyu-kobo.co.jp/J
                Source: packing list commercial invoice and bl termplate draft for export.exe, 00000000.00000003.673342532.0000000005E6C000.00000004.00000001.sdmpString found in binary or memory: http://www.jiyu-kobo.co.jp/X
                Source: packing list commercial invoice and bl termplate draft for export.exe, 00000000.00000003.673390206.0000000005E69000.00000004.00000001.sdmpString found in binary or memory: http://www.jiyu-kobo.co.jp/d
                Source: packing list commercial invoice and bl termplate draft for export.exe, 00000000.00000003.673342532.0000000005E6C000.00000004.00000001.sdmpString found in binary or memory: http://www.jiyu-kobo.co.jp/jp/
                Source: packing list commercial invoice and bl termplate draft for export.exe, 00000000.00000003.673626995.0000000005E6A000.00000004.00000001.sdmpString found in binary or memory: http://www.jiyu-kobo.co.jp/jp/X
                Source: packing list commercial invoice and bl termplate draft for export.exe, 00000000.00000003.673626995.0000000005E6A000.00000004.00000001.sdmpString found in binary or memory: http://www.jiyu-kobo.co.jp/jp/d
                Source: packing list commercial invoice and bl termplate draft for export.exe, 00000000.00000003.673342532.0000000005E6C000.00000004.00000001.sdmpString found in binary or memory: http://www.jiyu-kobo.co.jp/s_tr
                Source: packing list commercial invoice and bl termplate draft for export.exe, 00000000.00000003.673342532.0000000005E6C000.00000004.00000001.sdmpString found in binary or memory: http://www.jiyu-kobo.co.jp/sv-s
                Source: packing list commercial invoice and bl termplate draft for export.exe, 00000000.00000003.669186150.0000000005E7B000.00000004.00000001.sdmpString found in binary or memory: http://www.tiro.com
                Source: packing list commercial invoice and bl termplate draft for export.exe, 00000009.00000002.931203784.0000000000402000.00000040.00000001.sdmpString found in binary or memory: https://www.theonionrouter.com/dist.torproject.org/torbrowser/9.5.3/tor-win32-0.4.3.6.zip
                Source: packing list commercial invoice and bl termplate draft for export.exe, 00000009.00000002.933232285.0000000003211000.00000004.00000001.sdmpString found in binary or memory: https://www.theonionrouter.com/dist.torproject.org/torbrowser/9.5.3/tor-win32-0.4.3.6.zip%tordir%%ha

                System Summary:

                barindex
                Initial sample is a PE file and has a suspicious nameShow sources
                Source: initial sampleStatic PE information: Filename: packing list commercial invoice and bl termplate draft for export.exe
                .NET source code contains very large stringsShow sources
                Source: packing list commercial invoice and bl termplate draft for export.exe, t?fgWql?xy?C/kaBb??kPS?.csLong String: Length: 217896
                Source: wVhpvdZWIB.exe.0.dr, t?fgWql?xy?C/kaBb??kPS?.csLong String: Length: 217896
                Source: 0.0.packing list commercial invoice and bl termplate draft for export.exe.9f0000.0.unpack, t?fgWql?xy?C/kaBb??kPS?.csLong String: Length: 217896
                Source: 9.0.packing list commercial invoice and bl termplate draft for export.exe.cc0000.0.unpack, t?fgWql?xy?C/kaBb??kPS?.csLong String: Length: 217896
                Source: 9.2.packing list commercial invoice and bl termplate draft for export.exe.cc0000.1.unpack, t?fgWql?xy?C/kaBb??kPS?.csLong String: Length: 217896
                Source: packing list commercial invoice and bl termplate draft for export.exeStatic PE information: 32BIT_MACHINE, EXECUTABLE_IMAGE
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeCode function: 9_2_012840B09_2_012840B0
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeCode function: 9_2_012816789_2_01281678
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeCode function: 9_2_012864709_2_01286470
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeCode function: 9_2_0128F0889_2_0128F088
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeCode function: 9_2_012886509_2_01288650
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeCode function: 9_2_016346A09_2_016346A0
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeCode function: 9_2_016345B09_2_016345B0
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeCode function: 9_2_016346909_2_01634690
                Source: packing list commercial invoice and bl termplate draft for export.exe, 00000000.00000000.665535621.00000000009F2000.00000002.00020000.sdmpBinary or memory string: OriginalFilenameZYxe.exeF vs packing list commercial invoice and bl termplate draft for export.exe
                Source: packing list commercial invoice and bl termplate draft for export.exeBinary or memory string: OriginalFilename vs packing list commercial invoice and bl termplate draft for export.exe
                Source: packing list commercial invoice and bl termplate draft for export.exe, 00000009.00000002.931203784.0000000000402000.00000040.00000001.sdmpBinary or memory string: OriginalFilenameUBrTqcgnlevNnYcnNIDjXNnCM.exe4 vs packing list commercial invoice and bl termplate draft for export.exe
                Source: packing list commercial invoice and bl termplate draft for export.exe, 00000009.00000002.931249574.0000000000CC2000.00000002.00020000.sdmpBinary or memory string: OriginalFilenameZYxe.exeF vs packing list commercial invoice and bl termplate draft for export.exe
                Source: packing list commercial invoice and bl termplate draft for export.exeBinary or memory string: OriginalFilenameZYxe.exeF vs packing list commercial invoice and bl termplate draft for export.exe
                Source: packing list commercial invoice and bl termplate draft for export.exeVirustotal: Detection: 44%
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeFile read: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeJump to behavior
                Source: packing list commercial invoice and bl termplate draft for export.exeStatic PE information: Section: .text IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_READ
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeKey opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiersJump to behavior
                Source: unknownProcess created: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exe 'C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exe'
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess created: C:\Windows\SysWOW64\schtasks.exe 'C:\Windows\System32\schtasks.exe' /Create /TN 'Updates\wVhpvdZWIB' /XML 'C:\Users\user\AppData\Local\Temp\tmpCAE9.tmp'
                Source: C:\Windows\SysWOW64\schtasks.exeProcess created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess created: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exe {path}
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess created: C:\Windows\SysWOW64\schtasks.exe 'C:\Windows\System32\schtasks.exe' /Create /TN 'Updates\wVhpvdZWIB' /XML 'C:\Users\user\AppData\Local\Temp\tmpCAE9.tmp'Jump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess created: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exe {path}Jump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeKey value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\InProcServer32Jump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeWMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeFile created: C:\Users\user\AppData\Roaming\wVhpvdZWIB.exeJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeFile created: C:\Users\user\AppData\Local\Temp\tmpCAE9.tmpJump to behavior
                Source: classification engineClassification label: mal100.troj.spyw.evad.winEXE@6/3@0/0
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeFile read: C:\Users\user\Desktop\desktop.iniJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeSection loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\a152fe02a317a77aeee36903305e8ba6\mscorlib.ni.dllJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeSection loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\a152fe02a317a77aeee36903305e8ba6\mscorlib.ni.dllJump to behavior
                Source: C:\Windows\System32\conhost.exeMutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6424:120:WilError_01
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeMutant created: \Sessions\1\BaseNamedObjects\zSdXYymfHDmIfzlxUHn
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeFile opened: C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dllJump to behavior
                Source: packing list commercial invoice and bl termplate draft for export.exeStatic PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR
                Source: packing list commercial invoice and bl termplate draft for export.exeStatic PE information: NO_SEH, TERMINAL_SERVER_AWARE, DYNAMIC_BASE, NX_COMPAT

                Data Obfuscation:

                barindex
                .NET source code contains potential unpackerShow sources
                Source: packing list commercial invoice and bl termplate draft for export.exe, xCJ?xl?mE/doTK??k?tr?e.cs.Net Code: D6549645123 System.Reflection.Assembly System.Reflection.Assembly::Load(System.Byte[])
                Source: wVhpvdZWIB.exe.0.dr, xCJ?xl?mE/doTK??k?tr?e.cs.Net Code: D6549645123 System.Reflection.Assembly System.Reflection.Assembly::Load(System.Byte[])
                Source: 0.0.packing list commercial invoice and bl termplate draft for export.exe.9f0000.0.unpack, xCJ?xl?mE/doTK??k?tr?e.cs.Net Code: D6549645123 System.Reflection.Assembly System.Reflection.Assembly::Load(System.Byte[])
                Source: 9.0.packing list commercial invoice and bl termplate draft for export.exe.cc0000.0.unpack, xCJ?xl?mE/doTK??k?tr?e.cs.Net Code: D6549645123 System.Reflection.Assembly System.Reflection.Assembly::Load(System.Byte[])
                Source: 9.2.packing list commercial invoice and bl termplate draft for export.exe.cc0000.1.unpack, xCJ?xl?mE/doTK??k?tr?e.cs.Net Code: D6549645123 System.Reflection.Assembly System.Reflection.Assembly::Load(System.Byte[])
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeFile created: \packing list commercial invoice and bl termplate draft for export.exe
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeFile created: \packing list commercial invoice and bl termplate draft for export.exe
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeFile created: \packing list commercial invoice and bl termplate draft for export.exeJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeFile created: \packing list commercial invoice and bl termplate draft for export.exeJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeFile created: C:\Users\user\AppData\Roaming\wVhpvdZWIB.exeJump to dropped file

                Boot Survival:

                barindex
                Uses schtasks.exe or at.exe to add and modify task schedulesShow sources
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess created: C:\Windows\SysWOW64\schtasks.exe 'C:\Windows\System32\schtasks.exe' /Create /TN 'Updates\wVhpvdZWIB' /XML 'C:\Users\user\AppData\Local\Temp\tmpCAE9.tmp'
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information set: NOOPENFILEERRORBOXJump to behavior

                Malware Analysis System Evasion:

                barindex
                Queries sensitive network adapter information (via WMI, Win32_NetworkAdapter, often done to detect virtual machines)Show sources
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeWMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_NetworkAdapterConfiguration
                Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)Show sources
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeWMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_BaseBoard
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exe TID: 6984Thread sleep time: -922337203685477s >= -30000sJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exe TID: 6924Thread sleep time: -17524406870024063s >= -30000sJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exe TID: 6932Thread sleep count: 740 > 30Jump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exe TID: 6932Thread sleep count: 9113 > 30Jump to behavior
                Source: C:\Windows\System32\conhost.exeLast function: Thread delayed
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeThread delayed: delay time: 922337203685477Jump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeThread delayed: delay time: 922337203685477Jump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeWindow / User API: threadDelayed 740Jump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeWindow / User API: threadDelayed 9113Jump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeWMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess information queried: ProcessInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeThread delayed: delay time: 922337203685477Jump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeThread delayed: delay time: 922337203685477Jump to behavior
                Source: packing list commercial invoice and bl termplate draft for export.exe, 00000009.00000002.934998689.00000000065C0000.00000004.00000001.sdmpBinary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
                Source: packing list commercial invoice and bl termplate draft for export.exeBinary or memory string: yNPVBitmapGetObjectget_ypVmCultureypVmDebuggerNonUserCodeAttributePoC
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess token adjusted: DebugJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess token adjusted: DebugJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeMemory allocated: page read and write | page guardJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess created: C:\Windows\SysWOW64\schtasks.exe 'C:\Windows\System32\schtasks.exe' /Create /TN 'Updates\wVhpvdZWIB' /XML 'C:\Users\user\AppData\Local\Temp\tmpCAE9.tmp'Jump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeProcess created: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exe {path}Jump to behavior
                Source: packing list commercial invoice and bl termplate draft for export.exe, 00000009.00000002.932745062.0000000001AF0000.00000002.00020000.sdmpBinary or memory string: Program Manager
                Source: packing list commercial invoice and bl termplate draft for export.exe, 00000009.00000002.932745062.0000000001AF0000.00000002.00020000.sdmpBinary or memory string: Shell_TrayWnd
                Source: packing list commercial invoice and bl termplate draft for export.exe, 00000009.00000002.932745062.0000000001AF0000.00000002.00020000.sdmpBinary or memory string: Progman
                Source: packing list commercial invoice and bl termplate draft for export.exe, 00000009.00000002.932745062.0000000001AF0000.00000002.00020000.sdmpBinary or memory string: Progmanlock
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exe VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\arial.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\ariali.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\arialbd.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\arialbi.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\ARIALN.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\ariblk.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\ARIALNI.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\ARIALNB.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\ARIALNBI.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\calibri.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\calibril.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\calibrii.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\calibrili.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\calibrib.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\calibriz.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\cambria.ttc VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\cambriai.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\cambriab.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\cambriaz.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\Candara.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\Candarai.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\Candarab.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\Candaraz.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\comic.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\comici.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\comicbd.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\comicz.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\consola.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\consolai.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\consolab.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\consolaz.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\constan.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\constani.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\constanb.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\constanz.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\corbel.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\corbeli.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\corbelb.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\corbelz.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\cour.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\couri.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\courbd.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\courbi.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\ebrima.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\ebrimabd.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\framd.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\FRADM.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\framdit.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\FRADMIT.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\FRAMDCN.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\FRADMCN.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\FRAHV.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\FRAHVIT.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\Gabriola.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\gadugi.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\gadugib.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\georgia.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\georgiai.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\georgiab.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\georgiaz.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\impact.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\Inkfree.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\javatext.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\LeelawUI.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\LeelUIsl.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\LeelaUIb.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\lucon.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\l_10646.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\malgun.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\malgunsl.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\malgunbd.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\himalaya.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\msjh.ttc VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\msjhl.ttc VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\msjhbd.ttc VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\ntailu.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\ntailub.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\phagspa.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\phagspab.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\micross.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\taile.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\taileb.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\msyh.ttc VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\msyhl.ttc VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\msyhbd.ttc VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\msyi.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\mingliub.ttc VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\monbaiti.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\msgothic.ttc VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\mvboli.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\mmrtext.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\mmrtextb.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\Nirmala.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\NirmalaS.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\NirmalaB.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\pala.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\palai.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\palab.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\palabi.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\segoepr.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\segoeprb.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\segoesc.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\segoescb.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\seguiemj.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\seguihis.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\seguisym.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\simsun.ttc VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\simsunb.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\Sitka.ttc VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\SitkaI.ttc VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\SitkaB.ttc VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\SitkaZ.ttc VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\sylfaen.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\symbol.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\tahoma.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\tahomabd.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\trebuc.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\trebucit.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\trebucbd.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\trebucbi.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\verdana.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\verdanai.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\verdanab.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\verdanaz.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\webdings.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\wingding.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\YuGothR.ttc VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\YuGothM.ttc VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\YuGothL.ttc VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\YuGothB.ttc VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\holomdl2.ttf VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\CENTURY.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\LEELAWAD.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\LEELAWDB.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\MSUIGHUR.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\MSUIGHUB.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\WINGDNG2.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\WINGDNG3.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\TEMPSITC.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\PRISTINA.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\PAPYRUS.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\MISTRAL.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\LHANDW.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\ITCKRIST.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\JUICE___.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\FRSCRIPT.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\FREESCPT.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\BRADHITC.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\OUTLOOK.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\BKANT.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\ANTQUAI.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\ANTQUAB.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\ANTQUABI.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\GARA.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\GARAIT.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\GARABD.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\MTCORSVA.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\GOTHIC.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\GOTHICI.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\GOTHICB.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\GOTHICBI.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\ALGER.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\BASKVILL.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\BAUHS93.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\BELL.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\BELLI.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\BELLB.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\BRLNSR.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\BRLNSDB.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\BRLNSB.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\BERNHC.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\BOD_PSTC.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\BRITANIC.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\BROADW.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\BRUSHSCI.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\CALIFR.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\CALIFI.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\CALIFB.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\CENTAUR.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\CHILLER.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\COLONNA.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\COOPBL.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\FTLTLT.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\HARLOWSI.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\HARNGTON.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\HTOWERT.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\HTOWERTI.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\JOKERMAN.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\KUNSTLER.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\LBRITE.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\LBRITED.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\LBRITEI.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\LBRITEDI.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\LCALLIG.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\LFAX.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\LFAXD.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\LFAXI.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\LFAXDI.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\MAGNETOB.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\MATURASC.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\MOD20.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\NIAGENG.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\NIAGSOL.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\OLDENGL.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\ONYX.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\PARCHM.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\PLAYBILL.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\POORICH.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\RAVIE.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\INFROMAN.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\SHOWG.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\SNAP____.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\STENCIL.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\VINERITC.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\VIVALDII.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\VLADIMIR.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\LATINWD.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\TCM_____.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\TCMI____.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\TCB_____.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\TCBI____.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\TCCM____.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\TCCB____.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\TCCEB.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\SCRIPTBL.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\ROCK.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\ROCKI.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\ROCKB.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\ROCKEB.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\ROCKBI.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\ROCC____.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\ROCCB___.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\RAGE.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\PERTILI.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\PERTIBD.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\PER_____.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\PERI____.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\PERB____.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\PERBI___.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\PALSCRI.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\OCRAEXT.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\MAIAN.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\LTYPE.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\LTYPEO.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\LTYPEB.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\LTYPEBO.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\LSANS.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\LSANSD.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\LSANSI.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\LSANSDI.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\IMPRISHA.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\HATTEN.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\GOUDYSTO.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\GOUDOS.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\GOUDOSI.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\GOUDOSB.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\GLECB.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\GIL_____.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\GILI____.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\GILB____.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\GILBI___.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\GILC____.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\GLSNECB.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\GIGI.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\FRABK.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\FRABKIT.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\FORTE.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\FELIXTI.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\ERASMD.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\ERASLGHT.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\ERASDEMI.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\ERASBD.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\ENGR.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\ELEPHNT.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\ELEPHNTI.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\ITCEDSCR.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\CURLZ___.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\COPRGTL.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\COPRGTB.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\CENSCBK.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\SCHLBKI.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\SCHLBKB.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\SCHLBKBI.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\CASTELAR.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\CALIST.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\CALISTI.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\CALISTB.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\CALISTBI.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\BOOKOS.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\BOOKOSB.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\BOOKOSI.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\BOOKOSBI.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\BOD_R.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\BOD_I.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\BOD_B.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\BOD_BI.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\BOD_CR.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\BOD_BLAR.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\BOD_CI.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\BOD_CB.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\BOD_BLAI.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\BOD_CBI.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\ITCBLKAD.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\ARLRDBD.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\AGENCYR.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\AGENCYB.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\BSSYM7.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\REFSAN.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\REFSPCL.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\MTEXTRA.TTF VolumeInformationJump to behavior
                Source: C:\Users\user\Desktop\packing list commercial invoice and bl termplate draft for export.exeQueries volume information: C:\Windows\Fonts\marlett.ttf VolumeInformationJump to behav