Analysis
-
max time kernel
27s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
11/05/2024, 03:47
Behavioral task
behavioral1
Sample
72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe
-
Size
497KB
-
MD5
72ffb666c6e49bb117c6c1c51cf9a840
-
SHA1
8a802350b20b99ec06592204fd40a129d9a731d4
-
SHA256
196872922f3abbdfef478ac542e6fb006c99f3e2dc913e9fbccd6b887cdf5ac7
-
SHA512
2edacdb0d3b3fc6162f27d16711e2cfe854bb3fbdd5c50afbdf27725433f0af537e1a7e5b1b7efbd9c2013a5ce00f7b96cdf8fe714e670b727d14892351073a6
-
SSDEEP
12288:bPKL8q7WltJU2eDekUfd+KndoeX7rp+XajhPXCJkr1rpHD:bSLlUzUrKrFA8NWChvIgppj
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
resource yara_rule behavioral1/memory/2140-0-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/files/0x00070000000153fd-5.dat upx behavioral1/memory/2436-67-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2024-91-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2768-93-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2864-95-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/1984-97-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/864-99-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2224-106-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2436-105-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2864-103-0x0000000004520000-0x000000000453D000-memory.dmp upx behavioral1/memory/1968-101-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2140-102-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2768-110-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2864-112-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2260-114-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2024-108-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/1628-119-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/596-118-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2224-117-0x0000000004A90000-0x0000000004AAD000-memory.dmp upx behavioral1/memory/856-123-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/1788-124-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/1968-120-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2416-125-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2320-127-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2260-129-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/1820-128-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/596-130-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2620-132-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/1628-131-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/1244-135-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2732-139-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2620-138-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2916-141-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2224-143-0x0000000005060000-0x000000000507D000-memory.dmp upx behavioral1/memory/1064-147-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2916-150-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/1940-145-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2396-144-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/1036-151-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/1304-152-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2776-155-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/1940-156-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/3124-159-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2324-158-0x0000000000520000-0x000000000053D000-memory.dmp upx behavioral1/memory/1064-157-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/1036-160-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/3136-161-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/880-162-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/3264-163-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2432-166-0x0000000004DD0000-0x0000000004DED000-memory.dmp upx behavioral1/memory/3124-168-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/3448-167-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/3492-169-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/3596-171-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/3696-174-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/3492-173-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/3712-176-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/3544-177-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/3596-179-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/3772-180-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/3696-181-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/3868-184-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/3728-183-0x0000000000400000-0x000000000041D000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\H: 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File opened (read-only) \??\K: 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File opened (read-only) \??\M: 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File opened (read-only) \??\O: 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File opened (read-only) \??\R: 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File opened (read-only) \??\Z: 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File opened (read-only) \??\G: 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File opened (read-only) \??\L: 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File opened (read-only) \??\P: 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File opened (read-only) \??\Q: 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File opened (read-only) \??\S: 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File opened (read-only) \??\X: 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File opened (read-only) \??\A: 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File opened (read-only) \??\B: 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File opened (read-only) \??\I: 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File opened (read-only) \??\J: 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File opened (read-only) \??\U: 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File opened (read-only) \??\W: 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File opened (read-only) \??\Y: 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File opened (read-only) \??\E: 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File opened (read-only) \??\N: 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File opened (read-only) \??\T: 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File opened (read-only) \??\V: 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe -
Drops file in System32 directory 10 IoCs
description ioc Process File created C:\Windows\SysWOW64\config\systemprofile\japanese kicking lesbian masturbation glans 50+ .mpeg.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\brasilian nude horse hot (!) feet .zip.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\System32\DriverStore\Temp\lingerie public cock YEâPSè& .rar.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\System32\LogFiles\Fax\Incoming\russian action gay full movie ejaculation .avi.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\american cum lesbian sleeping .avi.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\japanese animal beast full movie young .rar.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\shared\danish handjob lingerie lesbian castration .avi.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\french beast sleeping .rar.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\shared\danish action beast hidden glans .avi.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\black porn xxx full movie cock (Britney,Melissa).avi.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe -
Drops file in Program Files directory 15 IoCs
description ioc Process File created C:\Program Files\DVD Maker\Shared\tyrkish cumshot trambling licking cock .mpg.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\DocumentShare\brasilian animal hardcore public mature (Kathrin,Liz).mpeg.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\american nude beast voyeur swallow .mpeg.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\XML Files\Space Templates\danish porn blowjob big .mpg.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Program Files\Windows Journal\Templates\swedish cumshot hardcore [bangbus] hairy .mpg.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\IDTemplates\horse [free] cock .mpeg.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\microsoft shared\tyrkish horse horse public feet hairy (Melissa).mpeg.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Temp\brasilian porn horse [milf] titts mistress .avi.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Update\Download\horse voyeur ejaculation .zip.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Notebook Templates\american nude lesbian several models traffic .mpeg.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Program Files\Common Files\Microsoft Shared\fucking uncut hole (Britney,Melissa).avi.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\brasilian horse xxx girls (Tatjana).zip.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Office\Templates\danish action horse voyeur traffic .zip.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\russian handjob gay masturbation hole beautyfull .rar.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\swedish animal hardcore [free] .zip.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\winsxs\amd64_microsoft-windows-sharedfoldersui_31bf3856ad364e35_6.1.7600.16385_none_1412267f4b3bb985\russian action trambling big hole .avi.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_3863e9ef3f804dd9\fucking voyeur .mpeg.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE56E.tmp\danish cum sperm big titts mistress (Curtney).zip.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-h..-hmeshare.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_8c6fc5a7aa8c435d\danish animal trambling uncut feet penetration .mpeg.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_a3772de7111797da\tyrkish kicking trambling [milf] (Jade).mpeg.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-nfs-shared_31bf3856ad364e35_6.1.7600.16385_none_6377027f0030a06a\sperm full movie lady (Christine,Samantha).zip.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_de-de_6208b91f46896156\horse xxx girls glans 40+ .avi.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft.grouppolicy.admtmpleditor_31bf3856ad364e35_6.1.7601.17514_none_dd18b2a07d49aa11\french fucking sleeping feet .zip.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\brasilian animal bukkake [bangbus] latex .mpeg.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-h..-hmeshare.resources_31bf3856ad364e35_6.1.7600.16385_en-us_5d9f7d70ed4643fd\malaysia xxx uncut .mpg.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_6.1.7600.16385_it-it_18a6fde3093acac7\african xxx licking hole ìï .avi.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_ad7c61fb28607522\african fucking public sm .zip.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_it-it_963e6ae24c653bfe\cumshot lingerie public titts .rar.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-h..-hmeshare.resources_31bf3856ad364e35_6.1.7600.16385_it-it_ea4a469ab7713182\italian porn bukkake full movie bedroom .zip.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_39c9d74ef2ad6c7b\cum xxx [bangbus] cock shoes .rar.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor\hardcore lesbian titts (Jenna,Karin).avi.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_6.1.7600.16385_de-de_e30b5ec05031d17d\xxx girls blondie (Anniston,Melissa).mpg.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_netfx-aspnet_installsqlstatetemp_b03f5f7f11d50a3a_6.1.7600.16385_none_16a2bb1dbab1c595\handjob fucking uncut feet .rar.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_es-es_095efe9c8261401e\chinese beast sleeping circumcision .zip.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_en-us_0af98f1835676d1b\french gay licking circumcision .avi.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-m..-temptable-provider_31bf3856ad364e35_6.1.7600.16385_none_1dd3ce8d1e7524cd\cum sperm [free] blondie .rar.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_6.1.7600.16385_de-de_5803850b2f40840e\brasilian cumshot lingerie full movie young .rar.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_6.1.7600.16385_it-it_8d9f242de8497d58\porn trambling masturbation titts ìï (Jade).zip.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-ime-eashared-ccshared_31bf3856ad364e35_6.1.7601.17514_none_34400a5790d1d336\beast several models pregnant .mpg.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sx-shared_31bf3856ad364e35_6.1.7600.16385_none_9498b282333b64ec\black kicking lesbian catfight stockings .avi.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\tyrkish porn bukkake full movie titts bedroom .mpg.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sharedfolders-adm_31bf3856ad364e35_6.1.7600.16385_none_af6f98ff87b0e3cc\canadian beast voyeur hole .rar.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\winsxs\Temp\russian animal trambling big (Tatjana).rar.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\indian cumshot horse masturbation feet young (Curtney).rar.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-p..al-securitytemplate_31bf3856ad364e35_6.1.7600.16385_none_49dd84a06c7c8863\norwegian bukkake hidden hole .zip.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-d..-ime-eashared-proxy_31bf3856ad364e35_6.1.7600.16385_none_965db382b6fef5cb\french fucking uncut gorgeoushorny .avi.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_en-us_aedaf3947d09fbe5\spanish sperm big cock fishy (Liz).rar.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\assembly\temp\trambling [milf] titts .zip.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_de-de_bcc167434bb9b3ea\black cumshot gay full movie bedroom .mpeg.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_netfx-aspnet_installsqlstatetemp_b03f5f7f11d50a3a_6.1.7600.16385_none_5e4ff1f4cf2dee9b\danish action xxx [milf] glans hotel (Sarah).avi.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\assembly\tmp\italian nude bukkake hot (!) .mpg.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\Downloaded Program Files\japanese nude trambling sleeping girly .zip.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_ac16749b75335680\blowjob full movie .mpeg.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_netfx-shared_registry_whidbey_31bf3856ad364e35_6.1.7600.16385_none_664dbffec8693dfe\lesbian [bangbus] boots (Britney,Karin).mpg.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor.Resources\italian gang bang gay masturbation lady .zip.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_8bfc34b93f0fdd42\spanish blowjob voyeur feet penetration .zip.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft.grouppolicy.admtmpleditor_31bf3856ad364e35_6.1.7601.17514_none_39374e2435a71b47\hardcore girls .rar.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_6.1.7601.17514_none_3c93ac15fd731acf\trambling hot (!) hole bedroom .rar.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_netfx-shared_netfx_20_mscorwks_31bf3856ad364e35_6.1.7600.16385_none_7f84cd98a7a56fd8\russian cum xxx voyeur glans 40+ .mpg.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\bukkake several models titts ash (Sylvia).avi.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\security\templates\danish gang bang lesbian licking titts blondie .mpeg.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Templates\danish animal lesbian full movie (Janette).rar.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\winsxs\InstallTemp\nude horse hidden .mpg.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\winsxs\wow64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.1.7601.17514_none_79642285ffd2a388\asian hardcore public mistress .zip.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor\sperm big glans .avi.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_0835101f2d90c7b6\horse big cock (Sonja,Janette).zip.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_94828572f7ddbf0f\danish horse trambling masturbation glans .mpg.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-h..-hmeshare.resources_31bf3856ad364e35_6.1.7600.16385_de-de_b4aea777fe683838\blowjob lesbian feet castration (Karin).avi.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_netfx-shared_netfx_20_perfcounter_31bf3856ad364e35_6.1.7600.16385_none_a945e2c500c90142\black gang bang lingerie sleeping .zip.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_es-es_0ac4ebfc358e5ec0\bukkake masturbation (Sarah).mpg.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_es-es_aea650787d30ed8a\cumshot lesbian [milf] feet .mpeg.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_it-it_3b85bcbe4734e96a\asian trambling several models wifey .zip.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\blowjob girls hole ash .zip.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\PLA\Templates\tyrkish animal gay [free] cock .avi.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-d..-ime-eashared-proxy_31bf3856ad364e35_6.1.7600.16385_none_f27c4f066f5c6701\nude horse catfight titts bondage .mpeg.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_6.1.7600.16385_none_99b74194b7347cab\norwegian blowjob voyeur hole .zip.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_6.1.7601.17514_none_98b24799b5d08c05\horse lesbian hole ash .mpeg.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_6.1.7601.17514_none_f3c374fc18118ca2\canadian gay [bangbus] feet .mpg.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\japanese cumshot lingerie voyeur glans .zip.exe 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2140 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 2436 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 2140 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 2024 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 2768 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 2436 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 2140 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 2864 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 1984 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 2028 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 2024 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 2768 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 2436 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 864 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 2140 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 1968 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 2224 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 1984 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 1664 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 1764 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 1608 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 1744 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 2768 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 2028 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 2864 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 2024 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 2436 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 2080 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 2260 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 2140 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 864 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 596 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 536 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 1628 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 2224 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 1984 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 1764 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 2768 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 1968 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 1744 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 1664 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 856 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 1788 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 1788 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 2864 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 2864 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 2500 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 2500 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 1672 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 1672 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 1532 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 1532 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 652 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 652 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 2324 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 2324 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 2416 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 2416 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 2320 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 2320 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 1820 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 1820 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 2024 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 2024 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 2140 wrote to memory of 2436 2140 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 28 PID 2140 wrote to memory of 2436 2140 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 28 PID 2140 wrote to memory of 2436 2140 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 28 PID 2140 wrote to memory of 2436 2140 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 28 PID 2436 wrote to memory of 2024 2436 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 29 PID 2436 wrote to memory of 2024 2436 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 29 PID 2436 wrote to memory of 2024 2436 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 29 PID 2436 wrote to memory of 2024 2436 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 29 PID 2140 wrote to memory of 2768 2140 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 30 PID 2140 wrote to memory of 2768 2140 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 30 PID 2140 wrote to memory of 2768 2140 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 30 PID 2140 wrote to memory of 2768 2140 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 30 PID 2024 wrote to memory of 2864 2024 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 31 PID 2024 wrote to memory of 2864 2024 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 31 PID 2024 wrote to memory of 2864 2024 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 31 PID 2024 wrote to memory of 2864 2024 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 31 PID 2768 wrote to memory of 1984 2768 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 32 PID 2768 wrote to memory of 1984 2768 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 32 PID 2768 wrote to memory of 1984 2768 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 32 PID 2768 wrote to memory of 1984 2768 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 32 PID 2436 wrote to memory of 2028 2436 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 33 PID 2436 wrote to memory of 2028 2436 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 33 PID 2436 wrote to memory of 2028 2436 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 33 PID 2436 wrote to memory of 2028 2436 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 33 PID 2140 wrote to memory of 864 2140 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 34 PID 2140 wrote to memory of 864 2140 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 34 PID 2140 wrote to memory of 864 2140 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 34 PID 2140 wrote to memory of 864 2140 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 34 PID 1984 wrote to memory of 1968 1984 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 35 PID 1984 wrote to memory of 1968 1984 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 35 PID 1984 wrote to memory of 1968 1984 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 35 PID 1984 wrote to memory of 1968 1984 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 35 PID 2864 wrote to memory of 2224 2864 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 36 PID 2864 wrote to memory of 2224 2864 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 36 PID 2864 wrote to memory of 2224 2864 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 36 PID 2864 wrote to memory of 2224 2864 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 36 PID 2024 wrote to memory of 1764 2024 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 37 PID 2024 wrote to memory of 1764 2024 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 37 PID 2024 wrote to memory of 1764 2024 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 37 PID 2024 wrote to memory of 1764 2024 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 37 PID 2768 wrote to memory of 1664 2768 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 38 PID 2768 wrote to memory of 1664 2768 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 38 PID 2768 wrote to memory of 1664 2768 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 38 PID 2768 wrote to memory of 1664 2768 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 38 PID 2436 wrote to memory of 1744 2436 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 39 PID 2436 wrote to memory of 1744 2436 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 39 PID 2436 wrote to memory of 1744 2436 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 39 PID 2436 wrote to memory of 1744 2436 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 39 PID 2028 wrote to memory of 1608 2028 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 40 PID 2028 wrote to memory of 1608 2028 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 40 PID 2028 wrote to memory of 1608 2028 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 40 PID 2028 wrote to memory of 1608 2028 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 40 PID 2140 wrote to memory of 2080 2140 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 41 PID 2140 wrote to memory of 2080 2140 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 41 PID 2140 wrote to memory of 2080 2140 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 41 PID 2140 wrote to memory of 2080 2140 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 41 PID 864 wrote to memory of 2260 864 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 42 PID 864 wrote to memory of 2260 864 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 42 PID 864 wrote to memory of 2260 864 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 42 PID 864 wrote to memory of 2260 864 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 42 PID 2224 wrote to memory of 536 2224 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 43 PID 2224 wrote to memory of 536 2224 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 43 PID 2224 wrote to memory of 536 2224 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 43 PID 2224 wrote to memory of 536 2224 72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe 43
Processes
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"1⤵
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2140 -
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2436 -
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2024 -
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2864 -
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2224 -
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵
- Suspicious behavior: EnumeratesProcesses
PID:536 -
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:3024
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"8⤵PID:3376
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"9⤵PID:5420
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"10⤵PID:10684
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"10⤵PID:14564
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"10⤵PID:23116
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"9⤵PID:7512
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"9⤵PID:22320
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"8⤵PID:4604
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"9⤵PID:8252
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"9⤵PID:14192
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"9⤵PID:23076
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"8⤵PID:6304
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"8⤵PID:10664
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"8⤵PID:14752
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"8⤵PID:23480
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:3464
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"8⤵PID:5480
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"9⤵PID:11652
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"9⤵PID:1804
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"8⤵PID:7720
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"8⤵PID:13168
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"8⤵PID:22984
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:4676
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"8⤵PID:7624
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"8⤵PID:21796
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:7056
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:11372
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:7680
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:2392
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:3544
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"8⤵PID:5608
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"9⤵PID:11160
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"9⤵PID:19416
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"8⤵PID:8012
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"8⤵PID:13160
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"8⤵PID:24156
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:4940
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"8⤵PID:8828
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"8⤵PID:11732
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"8⤵PID:21456
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:6288
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"8⤵PID:16780
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:12448
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:25284
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:3492
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:5516
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"8⤵PID:12480
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"8⤵PID:21684
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:7316
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:15156
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:25132
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:4700
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:9500
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:15628
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:25100
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:7080
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:10932
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:24140
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
PID:652 -
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:1032
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:4416
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"8⤵PID:7796
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"8⤵PID:21632
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:6720
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:11004
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:19180
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:3976
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:6988
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:10860
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:22844
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:5664
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:11380
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:20436
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:8432
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:14644
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:22892
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:2792
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:1440
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:7332
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:10964
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:6920
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:6048
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:9272
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:12596
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:25228
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:3792
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:6628
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:16608
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:10536
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:25180
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:5376
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:10220
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:14572
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:23488
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:7304
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:15524
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:25040
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:1764 -
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
PID:856 -
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:2776
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:3768
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"8⤵PID:7216
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"8⤵PID:11144
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"8⤵PID:22504
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:5168
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:9900
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:13216
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:12724
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:3816
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:6504
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:9916
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:14708
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:15092
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:5364
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:7312
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:15280
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:25172
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:2488
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:3844
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:6712
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"8⤵PID:16740
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:10876
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:22820
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:5464
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:11168
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:20452
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:24976
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:7992
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:13144
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:24148
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:3696
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:6044
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:11480
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:20420
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:10152
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:20580
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:5224
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:10400
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:25292
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:8040
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:15496
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:2324 -
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:1304
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:4824
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:9524
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:16684
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:25108
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:6864
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:10924
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:22992
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:4104
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:7248
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:10980
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:24096
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:5160
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:14776
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:22860
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:9844
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:19440
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:24900
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:1036
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:4856
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:9128
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:14532
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:23084
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:7372
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:10916
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:23124
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:4056
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:6928
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:10940
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:23132
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:5908
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:12488
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:18900
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:8460
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:11512
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:25212
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2028 -
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:1608 -
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:2620
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:3264
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:4920
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"8⤵PID:10432
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"8⤵PID:25124
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:7572
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:12504
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:19328
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:24908
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:4432
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:8448
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:14676
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:24212
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:6704
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:10988
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:20376
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:24940
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:3096
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:4480
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:10416
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:25156
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:7476
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:12020
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:20384
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:24892
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:4300
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:7384
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:15956
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:25276
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:6292
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:9860
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:13192
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:23148
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:2416 -
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:2624
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:4572
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:8556
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:11560
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:21852
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:6788
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:16732
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:10640
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:15016
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:23944
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:4064
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:7144
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:11104
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:22520
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:5948
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:12472
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:25236
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:9280
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:12464
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:25188
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:2444
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:4972
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:9508
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:15604
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:18916
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:6968
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:16804
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:11200
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:24196
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:4148
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:7192
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:11152
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:25068
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:5788
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:16748
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:9940
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:24104
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:1744 -
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:1532 -
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:2396
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:4768
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:8400
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:14540
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:23496
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:6804
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:11192
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:25300
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:3964
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:7156
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:10672
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:14848
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:5656
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:15720
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:25092
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:8440
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:14636
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:24164
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:2800
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:3868
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:6848
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:11404
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:23300
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:5496
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:11496
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:20412
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:8152
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:13136
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:23188
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:3688
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:5848
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:9868
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:13208
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:22908
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:5152
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:10212
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:14700
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:22948
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:7724
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:21648
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:1672 -
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:2584
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:4164
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:7240
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:10972
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:24204
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:5392
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:9948
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:20688
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:3956
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:6956
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:16824
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:10844
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:5684
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:24468
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:8476
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:11540
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:24012
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"3⤵PID:1940
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:4692
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:8596
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:14548
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:23100
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:6752
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:11128
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:22884
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"3⤵PID:4000
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:7032
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:11488
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:25060
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"3⤵PID:5884
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:12772
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:25196
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"3⤵PID:8424
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"3⤵PID:14556
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"3⤵PID:23180
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2768 -
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1984 -
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:1968 -
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
PID:596 -
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:2432
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:3404
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"8⤵PID:5400
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"9⤵PID:10608
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"9⤵PID:22836
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"8⤵PID:8180
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"8⤵PID:14612
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:4620
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"8⤵PID:8484
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"8⤵PID:11568
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"8⤵PID:22308
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:7012
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:11096
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:25052
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:3448
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:5448
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"8⤵PID:12060
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"8⤵PID:20588
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:8080
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:19188
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:25308
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:4656
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:8416
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:14684
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:23164
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:6972
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:10948
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:23156
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:2692
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:3076
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:6980
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:11412
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:22900
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:6012
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:1016
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:12520
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:19336
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:24984
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:3728
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:6520
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:16796
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:10180
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:22876
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:5232
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:10716
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:19364
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:24932
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:8160
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:22868
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:1628 -
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:2828
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:3608
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:5936
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"8⤵PID:11452
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"8⤵PID:22852
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:8524
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:4640
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:24680
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:5012
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:9956
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:21640
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:7356
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:10956
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:23000
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:3712
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:6196
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:10132
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:14716
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:12056
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:5260
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:10600
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:22828
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:8068
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:15536
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:2720
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:3596
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:5984
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:11396
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:24916
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:9224
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:12512
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:19432
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:5024
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:9492
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:14620
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:6484
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:11112
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:19980
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:3552
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:5640
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:16672
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:25084
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:8200
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:21880
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:4996
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:8804
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:12036
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:1680
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:24924
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:6780
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:10908
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:22932
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:1664 -
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:2500 -
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:2544
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:4188
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:6760
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:11136
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:22328
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:5920
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:16812
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:9836
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:20508
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:6568
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:3948
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:6888
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:10656
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:14520
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:5692
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:11388
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:23140
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:8468
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:11548
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:8196
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:2916
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:3192
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:7068
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:11120
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:16916
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:6020
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:11184
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:20428
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:9240
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:12456
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:3676
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:5460
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:10140
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:20708
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:4324
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:10408
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:25268
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:7544
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:12780
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:23068
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:1788 -
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:2552
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:4264
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:7984
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:16700
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:25148
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:6228
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:14504
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:24124
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:9884
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:13224
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:5488
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:3772
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:6472
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:9892
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:14744
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:18200
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:5304
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:10704
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:14184
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:24132
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:8120
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:14236
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:12696
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"3⤵PID:2732
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:3916
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:6912
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:10868
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:21492
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:5648
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:11176
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:12680
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:21420
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:8564
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:11532
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:18796
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"3⤵PID:3668
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:5672
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:9876
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:14692
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:22940
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"3⤵PID:4308
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:10364
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:24112
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"3⤵PID:7552
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"3⤵PID:12788
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"3⤵PID:23092
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:864 -
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:2260 -
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:1244
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:3308
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:4948
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:10372
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"7⤵PID:22924
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:7580
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:12796
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:23044
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:4460
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:7324
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:13184
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:23172
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:6768
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:10852
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:3124
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:4628
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:9480
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:14940
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:25076
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:7484
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:12028
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:20468
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:4360
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:8408
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:11524
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:20804
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:6512
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:9908
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:13200
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:22956
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:2320 -
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:3108
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:4588
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:9232
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:12528
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:19372
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:7608
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:15136
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:25164
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:4316
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:7408
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:14588
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:6276
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:15728
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:25252
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:9852
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:13176
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:23060
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"3⤵PID:880
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:4204
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:9964
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:22312
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:7492
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:12012
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:20444
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"3⤵PID:4252
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:8000
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:14604
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:24188
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"3⤵PID:6240
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"3⤵PID:9924
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"3⤵PID:14736
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"3⤵PID:18316
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
PID:2080 -
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"3⤵PID:1756
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:3284
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:5020
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:10424
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"6⤵PID:25244
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:7712
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:15488
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:25204
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:4440
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:7644
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:19808
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:24704
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:6728
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:10648
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:14768
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:22916
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"3⤵PID:3136
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:4684
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:9932
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:14628
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:23108
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:7704
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:14988
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:25140
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"3⤵PID:4368
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:8188
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:13152
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:24180
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"3⤵PID:6528
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"3⤵PID:10168
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"3⤵PID:18880
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
PID:1820 -
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"3⤵PID:1064
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:4880
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:9516
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"5⤵PID:16708
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:6680
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:11504
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:9996
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"3⤵PID:3984
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:6640
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:10996
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:19308
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"3⤵PID:5900
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:11364
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:24172
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"3⤵PID:8492
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"3⤵PID:11580
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"3⤵PID:22512
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"2⤵PID:3080
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"3⤵PID:4452
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:9156
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:11860
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:2920
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"4⤵PID:24992
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"3⤵PID:7600
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"3⤵PID:14840
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"3⤵PID:25116
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"2⤵PID:4272
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"3⤵PID:7368
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"3⤵PID:14596
-
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"2⤵PID:6264
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"2⤵PID:9828
-
-
C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\72ffb666c6e49bb117c6c1c51cf9a840_NeikiAnalytics.exe"2⤵PID:20516
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
MD5cdbcb7ced1f74d81242ade4a6f2469a3
SHA178a9868c3af4d10887b1dc039aa7a1a63df3605e
SHA256b6c2e81fdafc5dca66715b2f22b6fd0f8986663f31afa485651ddf928209768c
SHA512d5a0aeae026aaee8c09b033b53bf610cafafbd729173b6c5cadc1671a1d695f9029a599383125d6f60116eee8786849ab69b29bb93df49aea90dd86c38715d9b
-
Filesize
183B
MD5826195909fb12501b4ff3b44e7a19d8b
SHA1edba904b312d76613b246f9077351e839c6dea69
SHA256afdbb55af4d073397ffb49608724c104f103004321ff553a7c97ff6d15c0c688
SHA512058f14b00bb00027c5eadd8e6afb706b8d7f1b2146775c7e976c8699d75cfb79191a19eea99da5c3f1a4e46451b1c59547847727ded7414539c6034a32bfe716