Analysis
-
max time kernel
134s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
26/03/2024, 09:52
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe
Resource
win10v2004-20240226-en
2 signatures
150 seconds
General
-
Target
2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe
-
Size
1.8MB
-
MD5
bb6948233aa95bd1a97d9ddc8dc266fb
-
SHA1
1c8ca6ce935d713dd371b011b24198f9ab7c27b8
-
SHA256
94ffe964ff10f1532ad94cf5ab7e28062634239ad199e523db90ce8c1fec6b1f
-
SHA512
b1dd86ae552ab1eaaf6d57658cab489e66ab6047c12d25815465d4b5c3d62c411fbfa99d093a322b0f6bdb5c2a9c24b4b5588d13a2140b90805c51215ffda255
-
SSDEEP
49152:2JKScEO7T/A6u8RMt8NnKKYJI2vq9iTJMWC/qDfk63Z1jHycLBneRsoXs:2JYEOI6u8RMtanKKYJI2vq96xCyDfNy/
Score
1/10
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 64 IoCs
pid Process 488 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 4716 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 1520 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 4536 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 2980 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 4132 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 3268 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 1712 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 884 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 2624 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 2044 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 1288 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 2576 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 2552 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 4676 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 2028 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 2828 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 3780 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 5100 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 2496 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 3748 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 1580 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 3028 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 4052 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 4936 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 4428 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 2868 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 4888 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 4652 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 1504 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 5024 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 4384 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 448 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 1500 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 1668 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 2432 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 3772 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 2408 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 2852 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 1472 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 4008 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 1684 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 1140 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 3812 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 2960 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 1028 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 4460 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 4832 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 3496 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 4548 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 3616 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 2924 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 392 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 4728 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 668 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 3788 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 3960 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 3600 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 3196 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 4032 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 2008 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 3968 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 3044 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 4092 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 488 wrote to memory of 4716 488 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 87 PID 488 wrote to memory of 4716 488 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 87 PID 488 wrote to memory of 4716 488 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 87 PID 4716 wrote to memory of 1520 4716 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 88 PID 4716 wrote to memory of 1520 4716 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 88 PID 4716 wrote to memory of 1520 4716 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 88 PID 1520 wrote to memory of 4536 1520 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 89 PID 1520 wrote to memory of 4536 1520 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 89 PID 1520 wrote to memory of 4536 1520 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 89 PID 4536 wrote to memory of 2980 4536 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 90 PID 4536 wrote to memory of 2980 4536 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 90 PID 4536 wrote to memory of 2980 4536 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 90 PID 2980 wrote to memory of 4132 2980 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 91 PID 2980 wrote to memory of 4132 2980 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 91 PID 2980 wrote to memory of 4132 2980 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 91 PID 4132 wrote to memory of 3268 4132 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 92 PID 4132 wrote to memory of 3268 4132 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 92 PID 4132 wrote to memory of 3268 4132 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 92 PID 3268 wrote to memory of 1712 3268 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 93 PID 3268 wrote to memory of 1712 3268 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 93 PID 3268 wrote to memory of 1712 3268 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 93 PID 1712 wrote to memory of 884 1712 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 94 PID 1712 wrote to memory of 884 1712 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 94 PID 1712 wrote to memory of 884 1712 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 94 PID 884 wrote to memory of 2624 884 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 95 PID 884 wrote to memory of 2624 884 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 95 PID 884 wrote to memory of 2624 884 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 95 PID 2624 wrote to memory of 2044 2624 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 96 PID 2624 wrote to memory of 2044 2624 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 96 PID 2624 wrote to memory of 2044 2624 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 96 PID 2044 wrote to memory of 1288 2044 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 97 PID 2044 wrote to memory of 1288 2044 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 97 PID 2044 wrote to memory of 1288 2044 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 97 PID 1288 wrote to memory of 2576 1288 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 98 PID 1288 wrote to memory of 2576 1288 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 98 PID 1288 wrote to memory of 2576 1288 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 98 PID 2576 wrote to memory of 2552 2576 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 99 PID 2576 wrote to memory of 2552 2576 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 99 PID 2576 wrote to memory of 2552 2576 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 99 PID 2552 wrote to memory of 4676 2552 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 100 PID 2552 wrote to memory of 4676 2552 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 100 PID 2552 wrote to memory of 4676 2552 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 100 PID 4676 wrote to memory of 2028 4676 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 101 PID 4676 wrote to memory of 2028 4676 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 101 PID 4676 wrote to memory of 2028 4676 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 101 PID 2028 wrote to memory of 2828 2028 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 102 PID 2028 wrote to memory of 2828 2028 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 102 PID 2028 wrote to memory of 2828 2028 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 102 PID 2828 wrote to memory of 3780 2828 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 103 PID 2828 wrote to memory of 3780 2828 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 103 PID 2828 wrote to memory of 3780 2828 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 103 PID 3780 wrote to memory of 5100 3780 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 104 PID 3780 wrote to memory of 5100 3780 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 104 PID 3780 wrote to memory of 5100 3780 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 104 PID 5100 wrote to memory of 2496 5100 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 106 PID 5100 wrote to memory of 2496 5100 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 106 PID 5100 wrote to memory of 2496 5100 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 106 PID 2496 wrote to memory of 3748 2496 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 107 PID 2496 wrote to memory of 3748 2496 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 107 PID 2496 wrote to memory of 3748 2496 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 107 PID 3748 wrote to memory of 1580 3748 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 108 PID 3748 wrote to memory of 1580 3748 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 108 PID 3748 wrote to memory of 1580 3748 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 108 PID 1580 wrote to memory of 3028 1580 2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe 109
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe"1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:488 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia2⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4716 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia3⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1520 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia4⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4536 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia5⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2980 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia6⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4132 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia7⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3268 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia8⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1712 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia9⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:884 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia10⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2624 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia11⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2044 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia12⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1288 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia13⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2576 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia14⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2552 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia15⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4676 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia16⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2028 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia17⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2828 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia18⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3780 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia19⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:5100 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia20⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2496 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia21⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3748 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia22⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1580 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia23⤵
- Suspicious use of SetWindowsHookEx
PID:3028 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia24⤵
- Suspicious use of SetWindowsHookEx
PID:4052 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia25⤵
- Suspicious use of SetWindowsHookEx
PID:4936 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia26⤵
- Suspicious use of SetWindowsHookEx
PID:4428 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia27⤵
- Suspicious use of SetWindowsHookEx
PID:2868 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia28⤵
- Suspicious use of SetWindowsHookEx
PID:4888 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia29⤵
- Suspicious use of SetWindowsHookEx
PID:4652 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia30⤵
- Suspicious use of SetWindowsHookEx
PID:1504 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia31⤵
- Suspicious use of SetWindowsHookEx
PID:5024 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia32⤵
- Suspicious use of SetWindowsHookEx
PID:4384 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia33⤵
- Suspicious use of SetWindowsHookEx
PID:448 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia34⤵
- Suspicious use of SetWindowsHookEx
PID:1500 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia35⤵
- Suspicious use of SetWindowsHookEx
PID:1668 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia36⤵
- Suspicious use of SetWindowsHookEx
PID:2432 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia37⤵
- Suspicious use of SetWindowsHookEx
PID:3772 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia38⤵
- Suspicious use of SetWindowsHookEx
PID:2408 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia39⤵
- Suspicious use of SetWindowsHookEx
PID:2852 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia40⤵
- Suspicious use of SetWindowsHookEx
PID:1472 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia41⤵
- Suspicious use of SetWindowsHookEx
PID:4008 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia42⤵
- Suspicious use of SetWindowsHookEx
PID:1684 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia43⤵
- Suspicious use of SetWindowsHookEx
PID:1140 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia44⤵
- Suspicious use of SetWindowsHookEx
PID:3812 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia45⤵
- Suspicious use of SetWindowsHookEx
PID:2960 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia46⤵
- Suspicious use of SetWindowsHookEx
PID:1028 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia47⤵
- Suspicious use of SetWindowsHookEx
PID:4460 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia48⤵
- Suspicious use of SetWindowsHookEx
PID:4832 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia49⤵
- Suspicious use of SetWindowsHookEx
PID:3496 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia50⤵
- Suspicious use of SetWindowsHookEx
PID:4548 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia51⤵
- Suspicious use of SetWindowsHookEx
PID:3616 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia52⤵
- Suspicious use of SetWindowsHookEx
PID:2924 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia53⤵
- Suspicious use of SetWindowsHookEx
PID:392 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia54⤵
- Suspicious use of SetWindowsHookEx
PID:4728 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia55⤵
- Suspicious use of SetWindowsHookEx
PID:668 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia56⤵
- Suspicious use of SetWindowsHookEx
PID:3788 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia57⤵
- Suspicious use of SetWindowsHookEx
PID:3960 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia58⤵
- Suspicious use of SetWindowsHookEx
PID:3600 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia59⤵
- Suspicious use of SetWindowsHookEx
PID:3196 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia60⤵
- Suspicious use of SetWindowsHookEx
PID:4032 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia61⤵
- Suspicious use of SetWindowsHookEx
PID:2008 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia62⤵
- Suspicious use of SetWindowsHookEx
PID:3968 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia63⤵
- Suspicious use of SetWindowsHookEx
PID:3044 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia64⤵
- Suspicious use of SetWindowsHookEx
PID:4092 -
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia65⤵PID:1892
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia66⤵PID:3420
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia67⤵PID:2164
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia68⤵PID:4860
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia69⤵PID:3076
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia70⤵PID:1880
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia71⤵PID:2228
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia72⤵PID:2968
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia73⤵PID:440
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia74⤵PID:2872
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia75⤵PID:2956
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia76⤵PID:1356
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia77⤵PID:4420
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia78⤵PID:4704
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia79⤵PID:4128
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia80⤵PID:4348
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia81⤵PID:4396
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia82⤵PID:4252
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia83⤵PID:3520
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia84⤵PID:2644
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia85⤵PID:4168
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia86⤵PID:1648
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia87⤵PID:3408
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia88⤵PID:5136
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia89⤵PID:5152
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia90⤵PID:5168
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia91⤵PID:5200
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia92⤵PID:5216
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia93⤵PID:5240
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia94⤵PID:5256
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia95⤵PID:5272
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia96⤵PID:5292
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia97⤵PID:5308
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia98⤵PID:5328
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia99⤵PID:5344
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia100⤵PID:5360
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia101⤵PID:5376
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia102⤵PID:5392
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia103⤵PID:5408
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia104⤵PID:5424
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia105⤵PID:5440
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia106⤵PID:5456
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia107⤵PID:5472
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia108⤵PID:5488
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia109⤵PID:5504
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia110⤵PID:5520
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia111⤵PID:5540
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia112⤵PID:5568
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia113⤵PID:5584
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia114⤵PID:5600
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia115⤵PID:5616
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia116⤵PID:5632
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia117⤵PID:5648
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia118⤵PID:5668
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia119⤵PID:5684
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia120⤵PID:5700
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia121⤵PID:5716
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia.exe2024-03-26_bb6948233aa95bd1a97d9ddc8dc266fb_mafia122⤵PID:5732
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-