Analysis
-
max time kernel
30s -
max time network
147s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
11/05/2024, 09:33
Static task
static1
Behavioral task
behavioral1
Sample
0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe
-
Size
685KB
-
MD5
0a8a997624aafbd6885338b9bbdbad40
-
SHA1
bdfcfb3e78892f4ce71b21e94b10acbd92840cb7
-
SHA256
eced3473c600b6d9ba88b68653545fb008adf421e0ad81ecdf44599b64499d5f
-
SHA512
630bc6e09a8db658d5847216082e5fa101eed27461a8ce7a6610b57634f4f5f3a988e444ef4e97673b8b2ad1b4406828fc4e6c75569b3157192a5cfdcd035a90
-
SSDEEP
12288:oGHasii9BX9kCJbkGRm9I9BSuFvmCBHKv5EvyranejUyPtBdg+4tV66Qh:86X9kCJbki0AmCBHK6Aaej13OPM
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\H: 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File opened (read-only) \??\J: 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File opened (read-only) \??\L: 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File opened (read-only) \??\T: 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File opened (read-only) \??\G: 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File opened (read-only) \??\O: 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File opened (read-only) \??\P: 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File opened (read-only) \??\X: 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File opened (read-only) \??\I: 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File opened (read-only) \??\U: 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File opened (read-only) \??\V: 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File opened (read-only) \??\Y: 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File opened (read-only) \??\Z: 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File opened (read-only) \??\R: 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File opened (read-only) \??\A: 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File opened (read-only) \??\B: 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File opened (read-only) \??\E: 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File opened (read-only) \??\K: 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File opened (read-only) \??\M: 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File opened (read-only) \??\N: 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File opened (read-only) \??\Q: 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File opened (read-only) \??\S: 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File opened (read-only) \??\W: 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe -
Drops file in System32 directory 10 IoCs
description ioc Process File created C:\Windows\SysWOW64\FxsTmp\black kicking big .zip.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\tyrkish bukkake uncut 40+ .avi.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\asian handjob gay sleeping high heels .avi.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\gang bang full movie bondage .zip.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\System32\DriverStore\Temp\lesbian [free] boots .avi.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\russian animal uncut mistress .zip.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\shared\russian xxx cum big young .zip.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\shared\lesbian horse girls glans ejaculation .rar.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\System32\LogFiles\Fax\Incoming\italian lingerie catfight glans 40+ .mpg.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\indian cum lesbian sm (Liz,Jenna).rar.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe -
Drops file in Program Files directory 15 IoCs
description ioc Process File created C:\Program Files (x86)\Common Files\microsoft shared\malaysia fucking lesbian catfight ash .mpeg.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Temp\bukkake horse hidden boobs mistress .zip.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Office\Templates\canadian kicking licking glans balls .mpg.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\gay sleeping .mpeg.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Shared\cumshot cum several models balls .zip.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Program Files\Windows Journal\Templates\canadian kicking hidden titts lady .zip.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\russian kicking hidden (Anniston,Curtney).rar.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Notebook Templates\cumshot hot (!) 40+ .zip.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\canadian lesbian fucking [free] legs .avi.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\IDTemplates\spanish beast masturbation 50+ .avi.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\DocumentShare\japanese cumshot public .avi.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\XML Files\Space Templates\italian lesbian [bangbus] latex .rar.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Program Files\Common Files\Microsoft Shared\spanish animal animal [milf] feet .rar.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Update\Download\italian action full movie feet shoes .rar.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\beast [bangbus] nipples 40+ (Kathrin,Sandy).zip.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\winsxs\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_0835101f2d90c7b6\african animal [milf] black hairunshaved (Sarah,Anniston).mpeg.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sharedaccess_31bf3856ad364e35_6.1.7600.16385_none_60c2504d62fd4f0e\trambling girls vagina .mpg.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-vsssystemprovider_31bf3856ad364e35_6.1.7600.16385_none_a727eb798dcfb185\kicking several models redhair (Sonja).avi.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\Temp\porn beastiality licking young .zip.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor\american horse xxx uncut latex .zip.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_6.1.7600.16385_de-de_5803850b2f40840e\sperm girls hole .mpeg.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_6.1.7600.16385_none_cd2006602e5ee22e\japanese gang bang sleeping hole .mpg.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_39c9d74ef2ad6c7b\canadian kicking action uncut (Curtney,Anniston).zip.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_it-it_3b85bcbe4734e96a\canadian kicking trambling full movie gorgeoushorny .avi.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor.Resources\swedish handjob nude lesbian boots .mpeg.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\asian action several models .rar.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-b..-bcdtemplate-client_31bf3856ad364e35_6.1.7600.16385_none_8419660d1cc97b24\malaysia kicking cum lesbian hairy .mpeg.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_94828572f7ddbf0f\trambling full movie ìï (Jade,Ashley).mpeg.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-nfs-shared_31bf3856ad364e35_6.1.7600.16385_none_6377027f0030a06a\black horse action masturbation mature .mpeg.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\assembly\temp\british animal voyeur leather .rar.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-d..-ime-eashared-proxy_31bf3856ad364e35_6.1.7600.16385_none_f27c4f066f5c6701\porn [milf] .rar.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_netfx-shared_netfx_20_mscorwks_31bf3856ad364e35_6.1.7600.16385_none_7f84cd98a7a56fd8\african xxx full movie vagina .zip.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_en-us_65b23d3c3a97bfaf\tyrkish horse beastiality lesbian YEâPSè& (Gina,Melissa).zip.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.1.7601.17514_none_6f0f7833cb71e18d\danish gang bang lesbian .avi.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_it-it_963e6ae24c653bfe\handjob xxx catfight hole .mpg.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_en-us_aedaf3947d09fbe5\american gang bang bukkake catfight (Anniston,Karin).mpeg.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\Downloads\indian nude [free] traffic (Liz,Karin).mpeg.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_6.1.7600.16385_en-us_00f45b041e1e8fd3\horse beast hot (!) (Jade,Karin).zip.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_bacc7ceffc55dca2\indian animal catfight .avi.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_ad7c61fb28607522\gang bang lesbian (Tatjana,Sonja).zip.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_it-it_97a45841ff925aa0\bukkake voyeur (Sonja).mpeg.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_it-it_f25d066604c2ad34\chinese fucking action public lady .mpg.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_6.1.7601.17514_none_7bfdfb15e7184c41\canadian beast several models 40+ .mpeg.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Templates\norwegian beastiality lesbian lesbian high heels (Janette).mpeg.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_6.1.7601.17514_none_d81c96999f75bd77\russian bukkake voyeur feet hairy .mpg.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_6.1.7600.16385_it-it_8d9f242de8497d58\gang bang hot (!) castration .rar.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_de-de_6208b91f46896156\american horse xxx catfight redhair .mpeg.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft.grouppolicy.admtmpleditor_31bf3856ad364e35_6.1.7601.17514_none_39374e2435a71b47\handjob [bangbus] (Kathrin,Jade).mpeg.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE291.tmp\malaysia porn lingerie [bangbus] penetration .rar.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE56E.tmp\lingerie xxx several models .mpeg.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\Framework\v4.0.30319\Temporary ASP.NET Files\beast porn [free] sweet (Sylvia).zip.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_es-es_0ac4ebfc358e5ec0\gang bang lesbian glans .mpeg.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-sx-shared_31bf3856ad364e35_6.1.7600.16385_none_387a16fe7addf3b6\brasilian xxx lesbian pregnant .mpg.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_3863e9ef3f804dd9\action hot (!) vagina .avi.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-systempropertiesremote_31bf3856ad364e35_6.1.7600.16385_none_94ab98ac6d213009\swedish cum fucking [free] feet redhair .avi.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_netfx-shared_netfx_20_perfcounter_31bf3856ad364e35_6.1.7600.16385_none_4d274741486b900c\british bukkake horse big legs .mpg.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-h..-hmeshare.resources_31bf3856ad364e35_6.1.7600.16385_de-de_b4aea777fe683838\cum lesbian [free] .avi.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-h..-hmeshare.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_00225053e03f4c04\danish xxx sleeping .rar.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-h..-hmeshare.resources_31bf3856ad364e35_6.1.7600.16385_it-it_ea4a469ab7713182\fetish nude [bangbus] 40+ .mpeg.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_6.1.7600.16385_es-es_8bc7919d3f36cee7\malaysia cumshot [bangbus] .mpeg.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-p2p-pnrp-adm_31bf3856ad364e35_6.1.7600.16385_none_5499606faffb3f9f\swedish trambling lesbian castration .avi.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_6.1.7600.16385_none_293ea1e3e6bc5364\chinese gay sleeping 40+ .avi.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sharedfolders-adm_31bf3856ad364e35_6.1.7600.16385_none_af6f98ff87b0e3cc\malaysia nude gang bang [free] young .zip.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_6.1.7601.17514_none_3c93ac15fd731acf\trambling gay lesbian (Kathrin).mpeg.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_en-us_0993a1b8823a4e79\russian nude xxx licking lady .rar.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_515dc677700303ec\fetish big feet femdom .mpg.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor\beast big balls .zip.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9E41.tmp\black lesbian sleeping granny (Melissa,Tatjana).zip.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\asian cumshot porn uncut .avi.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_a3772de7111797da\bukkake [milf] .mpg.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_netfx-shared_netfx_20_perfcounter_31bf3856ad364e35_6.1.7600.16385_none_a945e2c500c90142\indian action lesbian .avi.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP6B8E.tmp\danish beastiality [milf] lady .mpeg.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_6.1.7601.17514_none_4fe2107fd06efdd8\trambling masturbation .mpeg.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-systempropertiesremote_31bf3856ad364e35_6.1.7600.16385_none_f0ca3430257ea13f\russian trambling gay hot (!) .rar.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\wow64_microsoft-windows-sharedaccess_31bf3856ad364e35_6.1.7600.16385_none_6b16fa9f975e1109\russian sperm hidden titts castration (Sonja).avi.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\assembly\GAC_MSIL\Microsoft.SharePoint.BusinessData.Administration.Client.Intl\cum public hairy (Curtney,Janette).zip.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-h..-hmeshare.resources_31bf3856ad364e35_6.1.7600.16385_en-us_5d9f7d70ed4643fd\lesbian hot (!) boobs hairy .rar.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-d..-ime-eashared-proxy_31bf3856ad364e35_6.1.7600.16385_none_965db382b6fef5cb\tyrkish nude gang bang girls .avi.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_es-es_aea650787d30ed8a\african lingerie hot (!) boobs mistress .zip.exe 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 1280 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 2504 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 1280 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 2676 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 1804 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 2504 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 1280 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 2644 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 2724 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 2748 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 2676 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 2008 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 2504 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 1804 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 1280 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 2208 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 2160 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 2644 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 2676 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 2164 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 2724 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 1204 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 1276 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 1832 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 2864 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 2748 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 2504 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 312 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 1804 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 2008 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 1280 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 1820 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 2256 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 2272 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 2208 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 2644 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 560 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 2676 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 2296 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 2804 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 2788 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 2160 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 1104 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 2164 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 2724 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 580 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 2244 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 1832 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 2748 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 1276 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 1484 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 1752 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 1204 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 2504 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 2372 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 1480 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 1972 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 1804 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 2864 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 2008 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 1280 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 1540 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 312 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 312 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 1280 wrote to memory of 2504 1280 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 28 PID 1280 wrote to memory of 2504 1280 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 28 PID 1280 wrote to memory of 2504 1280 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 28 PID 1280 wrote to memory of 2504 1280 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 28 PID 2504 wrote to memory of 2676 2504 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 29 PID 2504 wrote to memory of 2676 2504 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 29 PID 2504 wrote to memory of 2676 2504 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 29 PID 2504 wrote to memory of 2676 2504 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 29 PID 1280 wrote to memory of 1804 1280 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 30 PID 1280 wrote to memory of 1804 1280 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 30 PID 1280 wrote to memory of 1804 1280 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 30 PID 1280 wrote to memory of 1804 1280 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 30 PID 2676 wrote to memory of 2644 2676 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 31 PID 2676 wrote to memory of 2644 2676 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 31 PID 2676 wrote to memory of 2644 2676 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 31 PID 2676 wrote to memory of 2644 2676 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 31 PID 2504 wrote to memory of 2724 2504 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 32 PID 2504 wrote to memory of 2724 2504 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 32 PID 2504 wrote to memory of 2724 2504 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 32 PID 2504 wrote to memory of 2724 2504 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 32 PID 1804 wrote to memory of 2748 1804 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 33 PID 1804 wrote to memory of 2748 1804 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 33 PID 1804 wrote to memory of 2748 1804 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 33 PID 1804 wrote to memory of 2748 1804 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 33 PID 1280 wrote to memory of 2008 1280 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 34 PID 1280 wrote to memory of 2008 1280 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 34 PID 1280 wrote to memory of 2008 1280 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 34 PID 1280 wrote to memory of 2008 1280 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 34 PID 2644 wrote to memory of 2208 2644 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 35 PID 2644 wrote to memory of 2208 2644 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 35 PID 2644 wrote to memory of 2208 2644 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 35 PID 2644 wrote to memory of 2208 2644 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 35 PID 2724 wrote to memory of 2164 2724 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 36 PID 2724 wrote to memory of 2164 2724 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 36 PID 2724 wrote to memory of 2164 2724 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 36 PID 2724 wrote to memory of 2164 2724 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 36 PID 2676 wrote to memory of 2160 2676 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 37 PID 2676 wrote to memory of 2160 2676 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 37 PID 2676 wrote to memory of 2160 2676 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 37 PID 2676 wrote to memory of 2160 2676 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 37 PID 2748 wrote to memory of 1204 2748 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 38 PID 2748 wrote to memory of 1204 2748 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 38 PID 2748 wrote to memory of 1204 2748 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 38 PID 2748 wrote to memory of 1204 2748 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 38 PID 2504 wrote to memory of 1276 2504 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 39 PID 2504 wrote to memory of 1276 2504 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 39 PID 2504 wrote to memory of 1276 2504 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 39 PID 2504 wrote to memory of 1276 2504 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 39 PID 1804 wrote to memory of 2864 1804 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 40 PID 1804 wrote to memory of 2864 1804 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 40 PID 1804 wrote to memory of 2864 1804 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 40 PID 1804 wrote to memory of 2864 1804 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 40 PID 2008 wrote to memory of 1832 2008 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 41 PID 2008 wrote to memory of 1832 2008 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 41 PID 2008 wrote to memory of 1832 2008 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 41 PID 2008 wrote to memory of 1832 2008 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 41 PID 1280 wrote to memory of 312 1280 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 42 PID 1280 wrote to memory of 312 1280 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 42 PID 1280 wrote to memory of 312 1280 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 42 PID 1280 wrote to memory of 312 1280 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 42 PID 2208 wrote to memory of 1820 2208 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 43 PID 2208 wrote to memory of 1820 2208 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 43 PID 2208 wrote to memory of 1820 2208 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 43 PID 2208 wrote to memory of 1820 2208 0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe 43
Processes
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"1⤵
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1280 -
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2504 -
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2676 -
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2644 -
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2208 -
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵
- Suspicious behavior: EnumeratesProcesses
PID:1820 -
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:2044
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:3328
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"9⤵PID:5568
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"10⤵PID:10860
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"10⤵PID:17316
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"9⤵PID:8256
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"10⤵PID:16844
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"9⤵PID:18448
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:4868
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"9⤵PID:9104
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"10⤵PID:13360
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"10⤵PID:19236
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"9⤵PID:19888
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:7312
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"9⤵PID:18988
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:12076
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:19308
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:3388
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:5560
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"9⤵PID:10660
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"9⤵PID:19444
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:8264
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"9⤵PID:19952
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:17212
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:4928
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:8920
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"9⤵PID:17816
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:18184
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:7344
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:20264
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:12068
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:20780
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:1396
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:3420
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:5632
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"9⤵PID:11220
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"9⤵PID:21668
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:8708
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:19028
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:5008
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:9568
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"9⤵PID:20024
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:17044
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:7464
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:12320
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:14788
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:3496
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:5712
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:10812
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:17332
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:8684
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:18040
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:18416
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:5092
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:9672
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:18896
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:7496
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:11924
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:22624
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
PID:2256 -
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:1964
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:3356
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:5532
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"9⤵PID:10908
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"9⤵PID:16480
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:8296
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"9⤵PID:19928
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:18732
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:4860
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:8876
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"9⤵PID:18344
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:18192
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:7108
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:20724
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:11056
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:21304
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:3460
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:5704
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:11208
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:21712
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:8692
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:18176
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:5104
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:9576
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:18520
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:13160
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:19276
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:7480
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:12328
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:19568
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:18120
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:1552
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:3436
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:5580
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:11332
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:17436
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:8308
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:20236
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:18708
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:4980
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:9072
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:17404
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:7368
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:12052
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:19196
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:3580
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:5900
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:11476
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:13372
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:16216
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:9120
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:13380
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:17876
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:20004
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:5196
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:10532
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:20936
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:7796
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:20088
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:12536
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:22936
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:2160 -
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
PID:2296 -
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:1592
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:3888
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:6300
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"9⤵PID:13192
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"9⤵PID:19180
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:9728
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:18972
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:5520
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:10380
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:18684
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:8272
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:18256
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:18424
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:4040
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:6852
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:19872
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:11016
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:19472
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:5832
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:11420
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:19880
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:9064
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:17380
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:1568
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:3796
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:4624
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:17128
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:9592
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:18504
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:18312
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:5380
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:10268
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:18132
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:17284
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:7932
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:11080
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:21296
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:4004
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:6400
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:12856
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:19460
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:10244
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:18456
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:5752
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:11372
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:20984
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:8656
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:17252
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:2272 -
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:692
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:3428
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:5612
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:10900
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:17372
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:8700
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:20200
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:18168
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:4956
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:8936
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:18336
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:18160
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:7352
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:17792
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:12060
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:19348
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:3472
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:5640
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:10892
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:17388
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:8648
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:18352
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:18996
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:5080
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:9584
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:18152
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:7432
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:11736
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:19140
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:2996
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:3596
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:5944
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:11428
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:19148
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:9056
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:16808
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:17352
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:5148
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:9664
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:18808
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:17464
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:7776
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:20016
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:12336
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:13712
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:3672
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:6100
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:17416
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:9600
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:13184
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:19268
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:5220
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:10276
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:17276
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:7868
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:21048
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:12864
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:20732
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2724 -
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:2164 -
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
PID:2788 -
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:1728
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:3828
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:6208
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"9⤵PID:12568
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"9⤵PID:23452
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:9840
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"9⤵PID:19920
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:21016
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:5388
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:10300
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:19020
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:7940
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:15500
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:12116
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:19324
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:4016
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:6540
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:17180
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:9948
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:18496
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:20968
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:5792
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:11312
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:19212
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:8780
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:18536
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:18564
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:884
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:3728
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:6092
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:12904
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:20808
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:9608
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:17220
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:5284
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:10216
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:17268
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:7908
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:4140
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:11072
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:21696
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:3872
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:6316
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:17204
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:9720
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:18528
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:18716
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:5396
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:10224
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:17324
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:7924
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:20240
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:12144
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:21424
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:560 -
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:276
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:3604
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:5928
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:11580
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:18600
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:9112
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:19864
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:5188
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:10284
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:18512
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:7804
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:18392
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:12896
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:20848
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:3696
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:6056
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:12560
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:22952
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:9832
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:21024
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:5228
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:10348
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:18288
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:7844
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:19364
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:18700
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:2336
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:3736
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:6064
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:17020
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:9824
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:21092
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:5340
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:10340
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:19012
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:7916
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:12108
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:19356
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:3880
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:6368
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:17244
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:10200
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:18472
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:5412
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:10260
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:17228
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:7956
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:12304
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:17152
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:1276 -
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:2244 -
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:3076
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:4912
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:9096
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:19856
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:7296
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:20624
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:12092
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:20740
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:4504
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:8128
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:20636
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:18724
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:6740
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:20976
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:10632
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:18368
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:19436
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:1708
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:4176
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:7420
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:19752
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:11752
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:20788
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:6256
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:12492
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:21252
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:9696
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:17444
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:4164
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:7216
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:18360
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:11064
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:21704
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:6248
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:17172
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:9800
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:18556
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:19992
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:1484 -
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:2544
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:4964
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:9304
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:19172
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:7360
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:20300
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:12280
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:20196
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:4608
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:8120
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:17772
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:18488
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:6812
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:18980
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:10868
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:17260
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"3⤵PID:2184
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:4196
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:7404
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:16692
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:12272
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:19916
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:6264
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:17472
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:9712
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:18796
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"3⤵PID:4304
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:7548
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:12344
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:20596
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:14452
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"3⤵PID:6424
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:12264
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:20168
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"3⤵PID:9856
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"3⤵PID:21040
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1804 -
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2748 -
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:1204 -
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
PID:2804 -
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:1600
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:3864
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:6328
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"9⤵PID:12764
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"9⤵PID:20764
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:10252
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:11772
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:19408
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:5404
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:10192
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:18572
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:7948
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:11040
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:15540
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:21676
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:4048
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:6772
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:18384
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:10820
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:19164
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:5856
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:11628
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:20800
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:9048
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:17236
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:1704
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:3960
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:7072
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:20384
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:11024
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:19252
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:5984
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:12552
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:21224
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:9496
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:13168
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:19188
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:4296
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:7532
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:12176
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:22920
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:6432
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:11620
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:18624
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:9872
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:18304
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:580 -
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:2224
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:4900
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:8892
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:18200
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:7304
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:12084
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:20772
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:4480
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:8140
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:18464
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:6732
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:10948
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:17344
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:10828
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:21320
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:2128
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:4104
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:7092
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:21056
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:11380
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:19156
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:6040
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:17136
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:9616
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:19316
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:4344
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:7576
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:12184
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:14832
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:6528
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:12724
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:20832
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:10292
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:24504
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:18480
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:2864 -
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:1752 -
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:3112
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:5000
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:9296
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:17864
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:18592
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:7376
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:17488
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:12044
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:19332
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:4584
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:8148
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:19672
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:18956
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:6796
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:20952
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:10884
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:17396
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:2616
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:4116
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:7156
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:18644
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:12124
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:20756
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:6128
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:12484
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:22944
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:9816
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:21208
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:4312
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:7636
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:20292
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:12888
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:20840
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:6440
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:17428
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:9864
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:21032
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:2372 -
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:3096
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:4936
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:9088
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:18668
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:19848
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:7336
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:18676
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:10672
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:19912
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:4576
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:8112
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:24472
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:18440
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:6780
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:20944
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:10844
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:19428
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"3⤵PID:2572
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:4376
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:7820
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:15980
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:18692
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:6556
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:13200
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:19204
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:10308
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:19132
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"3⤵PID:4360
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:7784
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:8184
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:12544
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:23460
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"3⤵PID:6564
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:17188
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"3⤵PID:9932
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:18320
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"3⤵PID:20992
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2008 -
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:1832 -
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:1104 -
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:2632
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:4772
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:8904
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"8⤵PID:18328
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:19004
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:7080
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:18400
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:11396
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:21000
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:4456
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:7896
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:11048
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:21688
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:6596
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:20716
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:10208
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:17664
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:1596
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:4084
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:6884
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:18408
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:11008
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:19116
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:5952
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:11636
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:19340
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:9080
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:13388
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:4092
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:7024
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:24176
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:11388
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:15192
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:5960
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:17196
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:9624
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:13176
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:19260
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:1972 -
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:3156
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:5040
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:9156
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:16880
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:7440
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:20352
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:11844
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:19292
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:4628
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:8320
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:20032
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:17076
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:6788
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:12732
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:20824
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:10852
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:18632
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"3⤵PID:2620
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:4240
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:7512
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:17708
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:12296
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:20592
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:6292
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:17028
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:9808
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:19300
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"3⤵PID:4320
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:7624
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:11780
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:21008
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"3⤵PID:6448
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:12748
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:20816
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"3⤵PID:9848
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"3⤵PID:20960
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
PID:312 -
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:1540 -
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:3184
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:5064
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:9504
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"7⤵PID:19528
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:17156
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:7488
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:4068
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:11852
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:16220
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:4636
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:8160
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:19816
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:18744
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:6804
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:12740
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:19220
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:10836
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:21312
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"3⤵PID:2656
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:4704
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:8792
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:18208
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:7040
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:18544
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:11032
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:19284
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"3⤵PID:4448
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:7880
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:12100
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:19228
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"3⤵PID:6588
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:13148
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:19124
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"3⤵PID:9940
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"3⤵PID:21064
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
PID:1480 -
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"3⤵PID:3128
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:5024
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:9512
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"6⤵PID:19584
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:18964
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:7472
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:12312
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:20044
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:18264
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"3⤵PID:4616
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:8200
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:20224
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:18948
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"3⤵PID:6820
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:12756
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:20748
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"3⤵PID:10876
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"3⤵PID:17364
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"2⤵PID:2640
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"3⤵PID:4216
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:7456
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"5⤵PID:17672
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:11788
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:19452
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"3⤵PID:6272
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:13140
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:19244
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"3⤵PID:9704
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"3⤵PID:17164
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"2⤵PID:4352
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"3⤵PID:7588
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"4⤵PID:18376
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"3⤵PID:12352
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"3⤵PID:23152
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"2⤵PID:6520
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"3⤵PID:17036
-
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"2⤵PID:10232
-
-
C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0a8a997624aafbd6885338b9bbdbad40_NeikiAnalytics.exe"2⤵PID:18296
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.5MB
MD5c7d10f744dfc7f056609d5b41c494beb
SHA19d6039547c0a44b8c342786dfac50d028bc37abe
SHA256ccca2bb3bc68acaf17acd25ce954d50c4e21432c49a2579d894bd5dec6135219
SHA512e3022a2de6afd74b843ac63cd291f254f783234fc7065bcd0f9c6e5f74ee4c71e38fe2711772d79ab076c8b779ba275828b0752642830e7c9326aeb21829b181
-
Filesize
183B
MD59ab3cf03a2339118ae02cf6969dc6c79
SHA11ed0b5f10088700c8eb2901d4b13a435a52edaaf
SHA256ec9fed3906ba9de3a5b361c339eccf8cb5421329d262de70fcec4a3d9f6fe8e0
SHA51269e1e639e2c769718d5ae844c5d8f3976bd0bb8155cf8935789df4a7bb991cb5ec8fef36b777550b294cee9b069a3b5f60fe4fe1c5d74ec3540bd657628fb281