Analysis
-
max time kernel
150s -
max time network
141s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
01/09/2024, 08:24
Static task
static1
Behavioral task
behavioral1
Sample
2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe
-
Size
1.1MB
-
MD5
da7fe8b78166cdacf76ef7b3863819c5
-
SHA1
6a058a42829ece4e17f0a71cd411e60f85e3c958
-
SHA256
be2e4899b599ae19926b288c7321e3f80ae568e883e4e8163bd6aa68a77f83b8
-
SHA512
55e3c65bb67544f4e0a7f415387955266a6a630cc42021910ac4b8fdd9f20c636cec07f7ad7845f146dd5ed7d645302b7d4f6bf8dcb3f64b49b74b738ce85873
-
SSDEEP
24576:Z7DeTBrZC1eZsPf5hAOavGIAGGUYLx8h9d6vey2:dgZFggAGGLl8eey2
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 64 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found -
Checks SCSI registry key(s) 3 TTPs 18 IoCs
SCSI information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000 Process not Found -
Suspicious use of AdjustPrivilegeToken 7 IoCs
description pid Process Token: SeDebugPrivilege 20888 Process not Found Token: SeDebugPrivilege 640 Process not Found Token: SeDebugPrivilege 20828 Process not Found Token: SeDebugPrivilege 1208 Process not Found Token: SeDebugPrivilege 6456 Process not Found Token: SeDebugPrivilege 27800 Process not Found Token: SeDebugPrivilege 20760 Process not Found -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 5000 wrote to memory of 2120 5000 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 84 PID 5000 wrote to memory of 2120 5000 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 84 PID 5000 wrote to memory of 2120 5000 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 84 PID 2120 wrote to memory of 3512 2120 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 85 PID 2120 wrote to memory of 3512 2120 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 85 PID 2120 wrote to memory of 3512 2120 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 85 PID 3512 wrote to memory of 4284 3512 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 86 PID 3512 wrote to memory of 4284 3512 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 86 PID 3512 wrote to memory of 4284 3512 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 86 PID 4284 wrote to memory of 4820 4284 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 87 PID 4284 wrote to memory of 4820 4284 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 87 PID 4284 wrote to memory of 4820 4284 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 87 PID 4820 wrote to memory of 5068 4820 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 88 PID 4820 wrote to memory of 5068 4820 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 88 PID 4820 wrote to memory of 5068 4820 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 88 PID 5068 wrote to memory of 2860 5068 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 89 PID 5068 wrote to memory of 2860 5068 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 89 PID 5068 wrote to memory of 2860 5068 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 89 PID 2860 wrote to memory of 5108 2860 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 90 PID 2860 wrote to memory of 5108 2860 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 90 PID 2860 wrote to memory of 5108 2860 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 90 PID 5108 wrote to memory of 2140 5108 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 91 PID 5108 wrote to memory of 2140 5108 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 91 PID 5108 wrote to memory of 2140 5108 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 91 PID 2140 wrote to memory of 3688 2140 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 92 PID 2140 wrote to memory of 3688 2140 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 92 PID 2140 wrote to memory of 3688 2140 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 92 PID 3688 wrote to memory of 2480 3688 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 93 PID 3688 wrote to memory of 2480 3688 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 93 PID 3688 wrote to memory of 2480 3688 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 93 PID 2480 wrote to memory of 4184 2480 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 94 PID 2480 wrote to memory of 4184 2480 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 94 PID 2480 wrote to memory of 4184 2480 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 94 PID 4184 wrote to memory of 4028 4184 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 95 PID 4184 wrote to memory of 4028 4184 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 95 PID 4184 wrote to memory of 4028 4184 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 95 PID 4028 wrote to memory of 1812 4028 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 96 PID 4028 wrote to memory of 1812 4028 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 96 PID 4028 wrote to memory of 1812 4028 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 96 PID 1812 wrote to memory of 4840 1812 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 97 PID 1812 wrote to memory of 4840 1812 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 97 PID 1812 wrote to memory of 4840 1812 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 97 PID 4840 wrote to memory of 1116 4840 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 98 PID 4840 wrote to memory of 1116 4840 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 98 PID 4840 wrote to memory of 1116 4840 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 98 PID 1116 wrote to memory of 5048 1116 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 99 PID 1116 wrote to memory of 5048 1116 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 99 PID 1116 wrote to memory of 5048 1116 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 99 PID 5048 wrote to memory of 3112 5048 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 100 PID 5048 wrote to memory of 3112 5048 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 100 PID 5048 wrote to memory of 3112 5048 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 100 PID 3112 wrote to memory of 3492 3112 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 101 PID 3112 wrote to memory of 3492 3112 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 101 PID 3112 wrote to memory of 3492 3112 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 101 PID 3492 wrote to memory of 4432 3492 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 102 PID 3492 wrote to memory of 4432 3492 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 102 PID 3492 wrote to memory of 4432 3492 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 102 PID 4432 wrote to memory of 3120 4432 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 103 PID 4432 wrote to memory of 3120 4432 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 103 PID 4432 wrote to memory of 3120 4432 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 103 PID 3120 wrote to memory of 324 3120 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 104 PID 3120 wrote to memory of 324 3120 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 104 PID 3120 wrote to memory of 324 3120 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 104 PID 324 wrote to memory of 2644 324 2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe 105
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:5000 -
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"2⤵
- Suspicious use of WriteProcessMemory
PID:2120 -
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"3⤵
- Suspicious use of WriteProcessMemory
PID:3512 -
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"4⤵
- Suspicious use of WriteProcessMemory
PID:4284 -
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"5⤵
- Suspicious use of WriteProcessMemory
PID:4820 -
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"6⤵
- Suspicious use of WriteProcessMemory
PID:5068 -
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"7⤵
- Suspicious use of WriteProcessMemory
PID:2860 -
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"8⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:5108 -
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"9⤵
- Suspicious use of WriteProcessMemory
PID:2140 -
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"10⤵
- Suspicious use of WriteProcessMemory
PID:3688 -
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"11⤵
- Suspicious use of WriteProcessMemory
PID:2480 -
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"12⤵
- Suspicious use of WriteProcessMemory
PID:4184 -
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"13⤵
- Suspicious use of WriteProcessMemory
PID:4028 -
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"14⤵
- Suspicious use of WriteProcessMemory
PID:1812 -
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"15⤵
- Suspicious use of WriteProcessMemory
PID:4840 -
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"16⤵
- Suspicious use of WriteProcessMemory
PID:1116 -
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"17⤵
- Suspicious use of WriteProcessMemory
PID:5048 -
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"18⤵
- Suspicious use of WriteProcessMemory
PID:3112 -
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"19⤵
- Suspicious use of WriteProcessMemory
PID:3492 -
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"20⤵
- Suspicious use of WriteProcessMemory
PID:4432 -
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"21⤵
- Suspicious use of WriteProcessMemory
PID:3120 -
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"22⤵
- Suspicious use of WriteProcessMemory
PID:324 -
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"23⤵PID:2644
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"24⤵PID:820
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"25⤵PID:2012
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"26⤵PID:2564
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"27⤵PID:2124
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"28⤵PID:3084
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"29⤵PID:5004
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"30⤵PID:3452
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"31⤵PID:4964
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"32⤵PID:4168
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"33⤵PID:2992
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"34⤵PID:2700
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"35⤵PID:4948
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"36⤵PID:3692
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"37⤵PID:4672
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"38⤵PID:4220
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"39⤵PID:1480
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"40⤵PID:3300
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"41⤵PID:4696
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"42⤵PID:1108
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"43⤵PID:3960
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"44⤵PID:5008
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"45⤵PID:4808
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"46⤵PID:344
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"47⤵PID:1960
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"48⤵PID:216
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"49⤵PID:4072
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"50⤵PID:1220
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"51⤵PID:892
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"52⤵PID:536
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"53⤵
- System Location Discovery: System Language Discovery
PID:4872 -
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"54⤵PID:3712
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"55⤵PID:2436
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"56⤵PID:3840
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"57⤵PID:4480
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"58⤵PID:1728
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"59⤵PID:1968
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"60⤵PID:4784
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"61⤵PID:3680
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"62⤵PID:3468
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"63⤵PID:2904
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"64⤵PID:2940
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"65⤵PID:960
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"66⤵PID:5036
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"67⤵PID:1744
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"68⤵PID:4984
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"69⤵PID:2372
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"70⤵PID:1500
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"71⤵PID:2388
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"72⤵PID:816
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"73⤵PID:2128
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"74⤵PID:5044
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"75⤵PID:5024
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"76⤵PID:2000
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"77⤵PID:624
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"78⤵PID:3864
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"79⤵PID:3964
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"80⤵PID:2928
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"81⤵PID:3924
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"82⤵PID:3560
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"83⤵PID:1496
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"84⤵PID:4380
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"85⤵PID:4508
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"86⤵PID:4896
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"87⤵PID:4484
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"88⤵PID:4152
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"89⤵PID:2160
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"90⤵PID:2768
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"91⤵PID:2152
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"92⤵PID:1776
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"93⤵PID:5136
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"94⤵PID:5148
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"95⤵PID:5172
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"96⤵PID:5188
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"97⤵PID:5204
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"98⤵PID:5224
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"99⤵PID:5240
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"100⤵PID:5260
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"101⤵PID:5276
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"102⤵PID:5292
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"103⤵PID:5308
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"104⤵PID:5324
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"105⤵PID:5340
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"106⤵PID:5380
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"107⤵PID:5396
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"108⤵PID:5436
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"109⤵PID:5456
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"110⤵PID:5476
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"111⤵PID:5492
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"112⤵PID:5508
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"113⤵PID:5528
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"114⤵PID:5552
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"115⤵PID:5568
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"116⤵PID:5596
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"117⤵PID:5612
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"118⤵PID:5628
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"119⤵PID:5644
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"120⤵PID:5660
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"121⤵PID:5676
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_da7fe8b78166cdacf76ef7b3863819c5_mafia.exe"122⤵PID:5696
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-