Analysis

  • max time kernel
    149s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    30/08/2024, 12:19

General

  • Target

    SALKI098765R400.exe

  • Size

    1.0MB

  • MD5

    2a2526a15732cd1f3f8859fe3f504cb9

  • SHA1

    53f5eee1f770d79666d7421823f29ee21d8cba3e

  • SHA256

    406306efb272acd3c69ab3b1c1fadea2c41bf817ce71e5872b6ff426248207d5

  • SHA512

    029f573edc92908f027a46d035d0ce6b69f9ac2cd0b82dd1df75bb8ee43a02850e644217fc68d67b4a9633ed408534f7e46896afb7f337b71d9072b5140003d8

  • SSDEEP

    24576:4iUmSB/o5d1ubcvqqJGyUyTlUJS0Xtw5amFnRn2cdB:4/mU/ohubcvqq8oUJS7agd

Score
7/10

Malware Config

Signatures

  • Drops startup file 1 IoCs
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 1 IoCs
  • UPX packed file 64 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 64 IoCs

    AutoIT scripts compiled to PE executables.

  • System Location Discovery: System Language Discovery 1 TTPs 64 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SALKI098765R400.exe
    "C:\Users\Admin\AppData\Local\Temp\SALKI098765R400.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:3068
    • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
      "C:\Users\Admin\AppData\Local\Temp\SALKI098765R400.exe"
      2⤵
      • Drops startup file
      • Executes dropped EXE
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:2680
      • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
        "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
        3⤵
        • Executes dropped EXE
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SendNotifyMessage
        • Suspicious use of WriteProcessMemory
        PID:2068
        • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
          "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
          4⤵
          • Executes dropped EXE
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          • Suspicious use of WriteProcessMemory
          PID:1880
          • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
            "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
            5⤵
            • Executes dropped EXE
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of SendNotifyMessage
            • Suspicious use of WriteProcessMemory
            PID:2564
            • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
              "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
              6⤵
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              • Suspicious use of FindShellTrayWindow
              • Suspicious use of SendNotifyMessage
              • Suspicious use of WriteProcessMemory
              PID:2580
              • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                7⤵
                • Executes dropped EXE
                • System Location Discovery: System Language Discovery
                • Suspicious use of FindShellTrayWindow
                • Suspicious use of SendNotifyMessage
                • Suspicious use of WriteProcessMemory
                PID:2704
                • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                  "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                  8⤵
                  • Executes dropped EXE
                  • Suspicious use of FindShellTrayWindow
                  • Suspicious use of SendNotifyMessage
                  • Suspicious use of WriteProcessMemory
                  PID:1616
                  • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                    "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                    9⤵
                    • Executes dropped EXE
                    • Suspicious use of FindShellTrayWindow
                    • Suspicious use of SendNotifyMessage
                    • Suspicious use of WriteProcessMemory
                    PID:536
                    • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                      "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                      10⤵
                      • Executes dropped EXE
                      • Suspicious use of FindShellTrayWindow
                      • Suspicious use of SendNotifyMessage
                      • Suspicious use of WriteProcessMemory
                      PID:1956
                      • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                        "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                        11⤵
                        • Executes dropped EXE
                        • Suspicious use of FindShellTrayWindow
                        • Suspicious use of SendNotifyMessage
                        • Suspicious use of WriteProcessMemory
                        PID:2360
                        • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                          "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                          12⤵
                          • Executes dropped EXE
                          • Suspicious use of FindShellTrayWindow
                          • Suspicious use of SendNotifyMessage
                          • Suspicious use of WriteProcessMemory
                          PID:1504
                          • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                            "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                            13⤵
                            • Executes dropped EXE
                            • Suspicious use of FindShellTrayWindow
                            • Suspicious use of SendNotifyMessage
                            • Suspicious use of WriteProcessMemory
                            PID:2100
                            • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                              "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                              14⤵
                              • Executes dropped EXE
                              • Suspicious use of FindShellTrayWindow
                              • Suspicious use of SendNotifyMessage
                              • Suspicious use of WriteProcessMemory
                              PID:2512
                              • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                15⤵
                                • Executes dropped EXE
                                • Suspicious use of FindShellTrayWindow
                                • Suspicious use of SendNotifyMessage
                                • Suspicious use of WriteProcessMemory
                                PID:964
                                • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                  "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                  16⤵
                                  • Executes dropped EXE
                                  • Suspicious use of FindShellTrayWindow
                                  • Suspicious use of SendNotifyMessage
                                  • Suspicious use of WriteProcessMemory
                                  PID:2092
                                  • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                    "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                    17⤵
                                    • Executes dropped EXE
                                    • Suspicious use of FindShellTrayWindow
                                    • Suspicious use of SendNotifyMessage
                                    PID:1540
                                    • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                      "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                      18⤵
                                      • Executes dropped EXE
                                      • System Location Discovery: System Language Discovery
                                      • Suspicious use of FindShellTrayWindow
                                      • Suspicious use of SendNotifyMessage
                                      PID:2264
                                      • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                        "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                        19⤵
                                        • Executes dropped EXE
                                        • Suspicious use of FindShellTrayWindow
                                        • Suspicious use of SendNotifyMessage
                                        PID:1872
                                        • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                          "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                          20⤵
                                          • Executes dropped EXE
                                          • System Location Discovery: System Language Discovery
                                          • Suspicious use of FindShellTrayWindow
                                          • Suspicious use of SendNotifyMessage
                                          PID:324
                                          • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                            "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                            21⤵
                                            • Executes dropped EXE
                                            • Suspicious use of FindShellTrayWindow
                                            • Suspicious use of SendNotifyMessage
                                            PID:1896
                                            • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                              "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                              22⤵
                                              • Executes dropped EXE
                                              • System Location Discovery: System Language Discovery
                                              • Suspicious use of FindShellTrayWindow
                                              • Suspicious use of SendNotifyMessage
                                              PID:2164
                                              • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                23⤵
                                                • Executes dropped EXE
                                                • Suspicious use of FindShellTrayWindow
                                                • Suspicious use of SendNotifyMessage
                                                PID:2800
                                                • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                  "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                  24⤵
                                                  • Executes dropped EXE
                                                  • Suspicious use of FindShellTrayWindow
                                                  • Suspicious use of SendNotifyMessage
                                                  PID:2424
                                                  • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                    "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                    25⤵
                                                    • Executes dropped EXE
                                                    • Suspicious use of FindShellTrayWindow
                                                    • Suspicious use of SendNotifyMessage
                                                    PID:2584
                                                    • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                      "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                      26⤵
                                                      • Executes dropped EXE
                                                      • Suspicious use of FindShellTrayWindow
                                                      • Suspicious use of SendNotifyMessage
                                                      PID:2644
                                                      • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                        "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                        27⤵
                                                        • Executes dropped EXE
                                                        • Suspicious use of FindShellTrayWindow
                                                        • Suspicious use of SendNotifyMessage
                                                        PID:2988
                                                        • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                          "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                          28⤵
                                                          • Executes dropped EXE
                                                          • Suspicious use of FindShellTrayWindow
                                                          • Suspicious use of SendNotifyMessage
                                                          PID:1180
                                                          • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                            "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                            29⤵
                                                            • Executes dropped EXE
                                                            • Suspicious use of FindShellTrayWindow
                                                            • Suspicious use of SendNotifyMessage
                                                            PID:2852
                                                            • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                              "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                              30⤵
                                                              • Executes dropped EXE
                                                              • System Location Discovery: System Language Discovery
                                                              • Suspicious use of FindShellTrayWindow
                                                              • Suspicious use of SendNotifyMessage
                                                              PID:2600
                                                              • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                31⤵
                                                                • Executes dropped EXE
                                                                • Suspicious use of FindShellTrayWindow
                                                                • Suspicious use of SendNotifyMessage
                                                                PID:2780
                                                                • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                  "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                  32⤵
                                                                  • Executes dropped EXE
                                                                  • Suspicious use of FindShellTrayWindow
                                                                  • Suspicious use of SendNotifyMessage
                                                                  PID:1372
                                                                  • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                    "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                    33⤵
                                                                    • Executes dropped EXE
                                                                    PID:984
                                                                    • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                      "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                      34⤵
                                                                      • Executes dropped EXE
                                                                      PID:576
                                                                      • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                        "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                        35⤵
                                                                        • Executes dropped EXE
                                                                        PID:2952
                                                                        • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                          "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                          36⤵
                                                                          • Executes dropped EXE
                                                                          • System Location Discovery: System Language Discovery
                                                                          PID:1140
                                                                          • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                            "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                            37⤵
                                                                            • Executes dropped EXE
                                                                            • System Location Discovery: System Language Discovery
                                                                            PID:2144
                                                                            • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                              "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                              38⤵
                                                                              • Executes dropped EXE
                                                                              • System Location Discovery: System Language Discovery
                                                                              PID:1520
                                                                              • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                39⤵
                                                                                • Executes dropped EXE
                                                                                PID:1788
                                                                                • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                  "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                  40⤵
                                                                                  • Executes dropped EXE
                                                                                  PID:2476
                                                                                  • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                    "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                    41⤵
                                                                                    • Executes dropped EXE
                                                                                    PID:1288
                                                                                    • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                      "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                      42⤵
                                                                                      • Executes dropped EXE
                                                                                      PID:872
                                                                                      • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                        "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                        43⤵
                                                                                        • Executes dropped EXE
                                                                                        PID:1592
                                                                                        • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                          "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                          44⤵
                                                                                          • Executes dropped EXE
                                                                                          • System Location Discovery: System Language Discovery
                                                                                          PID:2636
                                                                                          • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                            "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                            45⤵
                                                                                            • Executes dropped EXE
                                                                                            • System Location Discovery: System Language Discovery
                                                                                            PID:2816
                                                                                            • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                              "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                              46⤵
                                                                                              • Executes dropped EXE
                                                                                              • System Location Discovery: System Language Discovery
                                                                                              PID:2176
                                                                                              • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                47⤵
                                                                                                • Executes dropped EXE
                                                                                                PID:1856
                                                                                                • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                  "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                  48⤵
                                                                                                  • Executes dropped EXE
                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                  PID:2540
                                                                                                  • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                    "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                    49⤵
                                                                                                    • Executes dropped EXE
                                                                                                    PID:2984
                                                                                                    • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                      "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                      50⤵
                                                                                                      • Executes dropped EXE
                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                      PID:2012
                                                                                                      • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                        "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                        51⤵
                                                                                                        • Executes dropped EXE
                                                                                                        PID:2796
                                                                                                        • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                          "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                          52⤵
                                                                                                          • Executes dropped EXE
                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                          PID:2024
                                                                                                          • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                            "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                            53⤵
                                                                                                            • Executes dropped EXE
                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                            PID:736
                                                                                                            • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                              "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                              54⤵
                                                                                                              • Executes dropped EXE
                                                                                                              PID:1480
                                                                                                              • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                55⤵
                                                                                                                • Executes dropped EXE
                                                                                                                PID:2236
                                                                                                                • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                  "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                  56⤵
                                                                                                                  • Executes dropped EXE
                                                                                                                  PID:2108
                                                                                                                  • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                    "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                    57⤵
                                                                                                                    • Executes dropped EXE
                                                                                                                    PID:1076
                                                                                                                    • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                      "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                      58⤵
                                                                                                                      • Executes dropped EXE
                                                                                                                      PID:404
                                                                                                                      • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                        "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                        59⤵
                                                                                                                        • Executes dropped EXE
                                                                                                                        PID:1528
                                                                                                                        • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                          "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                          60⤵
                                                                                                                          • Executes dropped EXE
                                                                                                                          PID:1988
                                                                                                                          • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                            "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                            61⤵
                                                                                                                            • Executes dropped EXE
                                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                                            PID:2080
                                                                                                                            • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                              "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                              62⤵
                                                                                                                              • Executes dropped EXE
                                                                                                                              PID:2284
                                                                                                                              • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                63⤵
                                                                                                                                • Executes dropped EXE
                                                                                                                                • System Location Discovery: System Language Discovery
                                                                                                                                PID:884
                                                                                                                                • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                  "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                  64⤵
                                                                                                                                  • Executes dropped EXE
                                                                                                                                  PID:1584
                                                                                                                                  • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                    "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                    65⤵
                                                                                                                                    • Executes dropped EXE
                                                                                                                                    PID:2120
                                                                                                                                    • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                      "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                      66⤵
                                                                                                                                        PID:2672
                                                                                                                                        • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                          "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                          67⤵
                                                                                                                                            PID:2708
                                                                                                                                            • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                              "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                              68⤵
                                                                                                                                                PID:2688
                                                                                                                                                • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                  "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                  69⤵
                                                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                                                  PID:1724
                                                                                                                                                  • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                    "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                    70⤵
                                                                                                                                                      PID:844
                                                                                                                                                      • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                        "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                        71⤵
                                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                                        PID:2880
                                                                                                                                                        • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                          "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                          72⤵
                                                                                                                                                            PID:2888
                                                                                                                                                            • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                              "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                              73⤵
                                                                                                                                                                PID:444
                                                                                                                                                                • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                  "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                  74⤵
                                                                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                                                                  PID:1948
                                                                                                                                                                  • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                    "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                    75⤵
                                                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                                                    PID:2320
                                                                                                                                                                    • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                      "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                      76⤵
                                                                                                                                                                        PID:2944
                                                                                                                                                                        • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                          "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                          77⤵
                                                                                                                                                                            PID:1600
                                                                                                                                                                            • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                              "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                              78⤵
                                                                                                                                                                                PID:1928
                                                                                                                                                                                • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                  79⤵
                                                                                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                                                                                  PID:1692
                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                    80⤵
                                                                                                                                                                                      PID:1456
                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                        81⤵
                                                                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                                                                        PID:2440
                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                          82⤵
                                                                                                                                                                                            PID:2416
                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                              83⤵
                                                                                                                                                                                                PID:1460
                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                  84⤵
                                                                                                                                                                                                    PID:1656
                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                      85⤵
                                                                                                                                                                                                        PID:2832
                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                          86⤵
                                                                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                                                                          PID:2648
                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                            87⤵
                                                                                                                                                                                                              PID:1768
                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                88⤵
                                                                                                                                                                                                                  PID:568
                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                    89⤵
                                                                                                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                    PID:1440
                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                      90⤵
                                                                                                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                      PID:408
                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                        91⤵
                                                                                                                                                                                                                          PID:2356
                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                            92⤵
                                                                                                                                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                            PID:2956
                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                              93⤵
                                                                                                                                                                                                                                PID:1780
                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                  94⤵
                                                                                                                                                                                                                                    PID:1696
                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                      95⤵
                                                                                                                                                                                                                                        PID:1680
                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                          96⤵
                                                                                                                                                                                                                                            PID:108
                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                              97⤵
                                                                                                                                                                                                                                                PID:1396
                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                  98⤵
                                                                                                                                                                                                                                                    PID:2128
                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                      99⤵
                                                                                                                                                                                                                                                        PID:916
                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                          100⤵
                                                                                                                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                          PID:1920
                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                            101⤵
                                                                                                                                                                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                            PID:2884
                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                              102⤵
                                                                                                                                                                                                                                                                PID:2560
                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                  103⤵
                                                                                                                                                                                                                                                                    PID:2044
                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                      104⤵
                                                                                                                                                                                                                                                                        PID:2992
                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                          105⤵
                                                                                                                                                                                                                                                                            PID:2872
                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                              106⤵
                                                                                                                                                                                                                                                                                PID:2248
                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                  107⤵
                                                                                                                                                                                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                  PID:2452
                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                    108⤵
                                                                                                                                                                                                                                                                                      PID:2900
                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                        109⤵
                                                                                                                                                                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                        PID:992
                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                          110⤵
                                                                                                                                                                                                                                                                                            PID:1128
                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                              111⤵
                                                                                                                                                                                                                                                                                                PID:3060
                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                  112⤵
                                                                                                                                                                                                                                                                                                    PID:1596
                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                      113⤵
                                                                                                                                                                                                                                                                                                        PID:2388
                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                          114⤵
                                                                                                                                                                                                                                                                                                            PID:2812
                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                              115⤵
                                                                                                                                                                                                                                                                                                                PID:2924
                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                  116⤵
                                                                                                                                                                                                                                                                                                                    PID:1792
                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                      117⤵
                                                                                                                                                                                                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                      PID:2072
                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                        118⤵
                                                                                                                                                                                                                                                                                                                          PID:2028
                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                            119⤵
                                                                                                                                                                                                                                                                                                                              PID:2396
                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                120⤵
                                                                                                                                                                                                                                                                                                                                  PID:2412
                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                    121⤵
                                                                                                                                                                                                                                                                                                                                      PID:3028
                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                        122⤵
                                                                                                                                                                                                                                                                                                                                          PID:1884
                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                            123⤵
                                                                                                                                                                                                                                                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                            PID:2088
                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                              124⤵
                                                                                                                                                                                                                                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                              PID:2964
                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                125⤵
                                                                                                                                                                                                                                                                                                                                                  PID:1748
                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                    126⤵
                                                                                                                                                                                                                                                                                                                                                      PID:3064
                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                        127⤵
                                                                                                                                                                                                                                                                                                                                                          PID:2820
                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                            128⤵
                                                                                                                                                                                                                                                                                                                                                              PID:2552
                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                129⤵
                                                                                                                                                                                                                                                                                                                                                                  PID:2596
                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                    130⤵
                                                                                                                                                                                                                                                                                                                                                                      PID:2592
                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                        131⤵
                                                                                                                                                                                                                                                                                                                                                                          PID:2288
                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                            132⤵
                                                                                                                                                                                                                                                                                                                                                                              PID:1716
                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                133⤵
                                                                                                                                                                                                                                                                                                                                                                                • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                PID:1108
                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                  134⤵
                                                                                                                                                                                                                                                                                                                                                                                    PID:1260
                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                      135⤵
                                                                                                                                                                                                                                                                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                      PID:1972
                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                        136⤵
                                                                                                                                                                                                                                                                                                                                                                                          PID:2112
                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                            137⤵
                                                                                                                                                                                                                                                                                                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                            PID:1560
                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                              138⤵
                                                                                                                                                                                                                                                                                                                                                                                                PID:1240
                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                  139⤵
                                                                                                                                                                                                                                                                                                                                                                                                    PID:2620
                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                      140⤵
                                                                                                                                                                                                                                                                                                                                                                                                        PID:860
                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                          141⤵
                                                                                                                                                                                                                                                                                                                                                                                                            PID:2892
                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                              142⤵
                                                                                                                                                                                                                                                                                                                                                                                                                PID:2160
                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                  143⤵
                                                                                                                                                                                                                                                                                                                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                  PID:2916
                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                    144⤵
                                                                                                                                                                                                                                                                                                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                    PID:1436
                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                      145⤵
                                                                                                                                                                                                                                                                                                                                                                                                                        PID:1080
                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                          146⤵
                                                                                                                                                                                                                                                                                                                                                                                                                            PID:1676
                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                              147⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                PID:2168
                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                  148⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:2456
                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                      149⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:2524
                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                          150⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:2724
                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                              151⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:2324
                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                152⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:1836
                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                    153⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:264
                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                      154⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:1924
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                          155⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:2204
                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                              156⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:920
                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                157⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:2460
                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  158⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:1700
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    159⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:2532
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        160⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:3024
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            161⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:1704
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              162⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:2748
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  163⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:940
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      164⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:1576
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          165⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:2200
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              166⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:2772
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  167⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:1492
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      168⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:1476
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        169⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:2244
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            170⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:2096
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                171⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:2764
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    172⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:2768
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        173⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:1664
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          174⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:864
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              175⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:2448
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  176⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:2196
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    177⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:2252
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        178⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:1232
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            179⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:2504
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                180⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:3052
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  181⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:1356
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      182⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:1284
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          183⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:1028
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              184⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:300
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  185⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:1328
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    186⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:960
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        187⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:3032
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            188⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:2572
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                189⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:1084
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    190⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:1900
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        191⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:1860
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            192⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:2316
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                193⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:2928
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    194⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:1916
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      195⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:816
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        196⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:900
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            197⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:1424
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              198⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:2848
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  199⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:1276
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      200⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:1876
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          201⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:2656
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            202⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:2468
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              203⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:3088
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  204⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:3140
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      205⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:3196
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          206⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:3248
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              207⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:3304
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                208⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:3356
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    209⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:3412
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        210⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:3468
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            211⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:3520
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                212⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:3576
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    213⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:3628
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      214⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:3684
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          215⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:3736
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            216⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:3792
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                217⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:3844
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  218⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:3900
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      219⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:3952
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          220⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:4008
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              221⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:4064
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  222⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:1104
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      223⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:3152
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          224⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:3212
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            225⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:3276
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                226⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:3336
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    227⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:3400
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        228⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:3456
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          229⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:3424
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              230⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:3588
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  231⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:3652
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      232⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:3712
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          233⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:3772
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              234⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:3840
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  235⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:3912
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    236⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:3976
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        237⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:4036
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          238⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:2004
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              239⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:3124
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  240⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:3208
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      241⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:3284
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          242⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:3352
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              243⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:3420
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  244⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:3492
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      245⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:3568
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          246⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:3636
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              247⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:3720
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\scrolar\Monteverdi.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  248⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:3804

                                                                                                                                                                                                                                                                                    Network

                                                                                                                                                                                                                                                                                    MITRE ATT&CK Enterprise v15

                                                                                                                                                                                                                                                                                    Replay Monitor

                                                                                                                                                                                                                                                                                    Loading Replay Monitor...

                                                                                                                                                                                                                                                                                    Downloads

                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\aut3FDE.tmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      397KB

                                                                                                                                                                                                                                                                                      MD5

                                                                                                                                                                                                                                                                                      a9818cdddd3427558a1b52f3a897f7d5

                                                                                                                                                                                                                                                                                      SHA1

                                                                                                                                                                                                                                                                                      8c4e0e6b5d38718775853897b5ade3dca8860bd7

                                                                                                                                                                                                                                                                                      SHA256

                                                                                                                                                                                                                                                                                      8edce98287539533d272d1b9624deff8ff5adaf11c1cc5cfe5256bf4422bb77a

                                                                                                                                                                                                                                                                                      SHA512

                                                                                                                                                                                                                                                                                      dbe1aa049950be7299549744bf035dc0731bb9626c2ee6ca02c3fccae864817affecda4189e1e9fef8be37d7486ded6da801cdeda6715f7a2694cb1c9ee3ed19

                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\aut3FFE.tmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      10KB

                                                                                                                                                                                                                                                                                      MD5

                                                                                                                                                                                                                                                                                      5ab857851bb90f19cfc4a5bef68f6285

                                                                                                                                                                                                                                                                                      SHA1

                                                                                                                                                                                                                                                                                      da5ae7783350302148e567c21e1a25ff312f43f3

                                                                                                                                                                                                                                                                                      SHA256

                                                                                                                                                                                                                                                                                      d8d0dd78ace87908e973377fb0ce249ae7d84b653aa45fd2af1914516224564d

                                                                                                                                                                                                                                                                                      SHA512

                                                                                                                                                                                                                                                                                      ee007315b9a590a64598532d1e78088362eb9f441945e71006978879db03a6db2cbad08d1039793a27275548093bf3ae1adf8c1445a9d6ee7d7a31039ffdb31d

                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\jinrikisha

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      56KB

                                                                                                                                                                                                                                                                                      MD5

                                                                                                                                                                                                                                                                                      ab1d29274213556fd265d9e44a8e2813

                                                                                                                                                                                                                                                                                      SHA1

                                                                                                                                                                                                                                                                                      902af8adb5d52a2871dc1e956162514d829be033

                                                                                                                                                                                                                                                                                      SHA256

                                                                                                                                                                                                                                                                                      9dbb2c43e92fb67336afded940c19e37de86ca86554341c9c8c94030f84f893d

                                                                                                                                                                                                                                                                                      SHA512

                                                                                                                                                                                                                                                                                      a4fe1e9adf1cd45e9843268899035b417009e3dfbb6b11bde32c04bf202a25dfdec670ed08a83dcece1a9efed590ec950dfe3a60f6395479f289e0adac207033

                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\pensum

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      482KB

                                                                                                                                                                                                                                                                                      MD5

                                                                                                                                                                                                                                                                                      cf1214864ab14d2bf906b73636da3a0e

                                                                                                                                                                                                                                                                                      SHA1

                                                                                                                                                                                                                                                                                      ad71b3268d6f91395727d02ddd007e5b75cfbcc9

                                                                                                                                                                                                                                                                                      SHA256

                                                                                                                                                                                                                                                                                      5960b9ac19d8d6c016e018d72f6376e4ec87bdf440b126393bebe526b5e10dbc

                                                                                                                                                                                                                                                                                      SHA512

                                                                                                                                                                                                                                                                                      1502d6017b1523fda0526479a4481a966707bb3f8d8eb3b890079c5fd92f58d6554da59268940c2fdad0d2daeaae863e9e46549a3a1a2dcdf2184fccd7de4ba4

                                                                                                                                                                                                                                                                                    • \Users\Admin\AppData\Local\scrolar\Monteverdi.exe

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      1.0MB

                                                                                                                                                                                                                                                                                      MD5

                                                                                                                                                                                                                                                                                      2a2526a15732cd1f3f8859fe3f504cb9

                                                                                                                                                                                                                                                                                      SHA1

                                                                                                                                                                                                                                                                                      53f5eee1f770d79666d7421823f29ee21d8cba3e

                                                                                                                                                                                                                                                                                      SHA256

                                                                                                                                                                                                                                                                                      406306efb272acd3c69ab3b1c1fadea2c41bf817ce71e5872b6ff426248207d5

                                                                                                                                                                                                                                                                                      SHA512

                                                                                                                                                                                                                                                                                      029f573edc92908f027a46d035d0ce6b69f9ac2cd0b82dd1df75bb8ee43a02850e644217fc68d67b4a9633ed408534f7e46896afb7f337b71d9072b5140003d8

                                                                                                                                                                                                                                                                                    • memory/324-306-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/324-321-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/404-787-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/536-148-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/536-133-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/576-501-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/736-732-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/872-594-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/872-606-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/884-842-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/964-242-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/964-227-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/984-489-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/1076-776-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/1140-528-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/1140-516-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/1180-427-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/1180-415-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/1288-581-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/1288-593-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/1372-478-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/1372-466-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/1480-743-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/1504-181-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/1504-196-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/1520-542-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/1520-554-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/1528-798-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/1540-259-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/1540-274-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/1584-853-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/1592-619-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/1592-607-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/1616-117-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/1616-132-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/1788-555-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/1788-567-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/1856-666-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/1872-305-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/1872-290-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/1880-54-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/1880-69-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/1896-322-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/1896-337-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/1956-164-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/1956-149-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/1988-809-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2012-699-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2024-721-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2068-38-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2068-53-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2080-820-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2092-243-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2092-258-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2100-211-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2108-765-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2144-529-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2144-541-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2164-350-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2176-655-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2236-754-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2264-289-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2284-831-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2360-165-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2360-180-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2424-376-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2424-364-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2476-568-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2476-580-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2512-226-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2540-677-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2564-70-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2564-85-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2580-101-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2580-86-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2584-388-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2584-377-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2584-502-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2600-441-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2600-453-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2636-631-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2644-401-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2644-389-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2680-37-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2680-21-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2704-116-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2780-465-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2796-710-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2800-363-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2800-351-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2816-644-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2816-632-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2852-440-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2852-428-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2952-515-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2952-503-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2984-688-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2988-402-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/2988-414-0x0000000000200000-0x000000000042F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/3068-19-0x0000000000FF0000-0x000000000121F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/3068-0-0x0000000000FF0000-0x000000000121F000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/3068-16-0x0000000002CD0000-0x0000000002EFF000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      2.2MB

                                                                                                                                                                                                                                                                                    • memory/3068-11-0x0000000000120000-0x0000000000124000-memory.dmp

                                                                                                                                                                                                                                                                                      Filesize

                                                                                                                                                                                                                                                                                      16KB