Analysis
-
max time kernel
19s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
12/05/2024, 15:02
Behavioral task
behavioral1
Sample
21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe
-
Size
1.2MB
-
MD5
21aa399396f8a048b68d0f33ca893460
-
SHA1
c8a01ea34dc8b6b2af78c465e364d221dbb4aea8
-
SHA256
863db3e7d8a03e62707e4e47c72275a3a3c9ad148bce2eabb836ceff34046482
-
SHA512
4b9ef6a1b2933b272b6a27e6f8024fe496ad2077a561702cc8afb6ef3c54c04b4b6e895c33bb0c9a31231245a2578058b09e5f92f46204ab566924fa389ad7a9
-
SSDEEP
24576:YogqpDtfhK3k+PwXMU727mfT5kFg04ZUf0v85xwjaRqh3BXh9QxY:X9FZb+FU7qm75ughQxOaRE31huxY
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
resource yara_rule behavioral1/memory/2032-0-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/files/0x0007000000014698-5.dat upx behavioral1/memory/1296-12-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2636-57-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2556-56-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2784-70-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2960-72-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2452-71-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2168-69-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2168-79-0x00000000044A0000-0x00000000044BE000-memory.dmp upx behavioral1/memory/1296-81-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2032-80-0x0000000005000000-0x000000000501E000-memory.dmp upx behavioral1/memory/2032-78-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2556-83-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2636-84-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2168-89-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2784-90-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2960-94-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2452-93-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1188-99-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/484-100-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1636-102-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2240-105-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1692-104-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1992-101-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2116-106-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/368-103-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1748-108-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1924-107-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/816-111-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1612-109-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2008-112-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/364-113-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/940-115-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2628-114-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2364-117-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1636-116-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2240-118-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2116-119-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1652-120-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2092-121-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/816-123-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/364-127-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2008-126-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/940-129-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/880-135-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1652-136-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/3012-138-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/848-137-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2956-140-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2744-141-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1352-143-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1196-145-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2344-144-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1904-147-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1720-149-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2648-151-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2956-150-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2860-152-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1964-154-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2592-155-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2500-158-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2876-159-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2648-160-0x0000000000400000-0x000000000041E000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\E: 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File opened (read-only) \??\H: 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File opened (read-only) \??\N: 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File opened (read-only) \??\Q: 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File opened (read-only) \??\R: 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File opened (read-only) \??\V: 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File opened (read-only) \??\W: 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File opened (read-only) \??\A: 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File opened (read-only) \??\J: 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File opened (read-only) \??\L: 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File opened (read-only) \??\M: 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File opened (read-only) \??\S: 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File opened (read-only) \??\U: 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File opened (read-only) \??\G: 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File opened (read-only) \??\I: 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File opened (read-only) \??\T: 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File opened (read-only) \??\X: 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File opened (read-only) \??\B: 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File opened (read-only) \??\K: 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File opened (read-only) \??\O: 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File opened (read-only) \??\P: 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File opened (read-only) \??\Y: 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File opened (read-only) \??\Z: 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe -
Drops file in System32 directory 10 IoCs
description ioc Process File created C:\Windows\System32\DriverStore\Temp\japanese animal gay girls .avi.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\british xxx lesbian lady .zip.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Windows\System32\LogFiles\Fax\Incoming\tyrkish action gay lesbian .avi.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\brasilian animal fucking several models titts 40+ .mpeg.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\sperm [bangbus] (Karin).mpeg.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\shared\lingerie catfight (Karin).mpg.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\cumshot trambling voyeur traffic .rar.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\american beastiality horse [free] .mpg.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\shared\brasilian beastiality gay hot (!) hole sm .avi.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\japanese cumshot beast hidden balls .mpg.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe -
Drops file in Program Files directory 15 IoCs
description ioc Process File created C:\Program Files\Common Files\Microsoft Shared\japanese gang bang horse licking latex .rar.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\brasilian cum blowjob voyeur .avi.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Temp\russian gang bang beast lesbian cock hotel (Liz).zip.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\DocumentShare\russian nude gay big high heels .rar.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Notebook Templates\japanese action bukkake masturbation titts redhair .rar.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Program Files\Windows Journal\Templates\gay lesbian titts .zip.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\microsoft shared\hardcore hot (!) hole .zip.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Update\Download\american action horse [free] .avi.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\xxx hidden glans .rar.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Office\Templates\tyrkish fetish bukkake [bangbus] .avi.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\lingerie [milf] feet .rar.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Shared\sperm voyeur pregnant .mpeg.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\IDTemplates\lingerie several models (Melissa).mpg.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\XML Files\Space Templates\brasilian action sperm lesbian (Samantha).avi.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\gay hot (!) (Tatjana).avi.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe -
Drops file in Windows directory 37 IoCs
description ioc Process File created C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\sperm uncut titts mature .mpg.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Windows\assembly\temp\lesbian [milf] .mpg.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\Downloads\black nude xxx big (Samantha).zip.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Windows\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor.Resources\hardcore licking cock hotel .avi.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP6B8E.tmp\danish cumshot hardcore full movie .mpg.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Windows\Downloaded Program Files\cum fucking hidden titts bondage (Karin).mpg.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Windows\PLA\Templates\black beastiality fucking licking .zip.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-d..-ime-eashared-proxy_31bf3856ad364e35_6.1.7600.16385_none_f27c4f066f5c6701\norwegian gay full movie glans .zip.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_6.1.7600.16385_none_99b74194b7347cab\french lesbian sleeping glans castration .zip.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_6.1.7601.17514_none_98b24799b5d08c05\gang bang blowjob uncut upskirt (Anniston,Jade).mpg.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\tyrkish horse hardcore sleeping (Samantha).mpg.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-b..-bcdtemplate-client_31bf3856ad364e35_6.1.7600.16385_none_8419660d1cc97b24\american porn xxx hot (!) cock high heels .zip.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Windows\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor.Resources\xxx uncut boots .avi.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Windows\assembly\GAC_32\Microsoft.SharePoint.BusinessData.Administration.Client\trambling public .rar.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Windows\assembly\GAC_MSIL\Microsoft.SharePoint.BusinessData.Administration.Client.Intl\italian porn xxx lesbian shower (Sandy,Sarah).rar.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\xxx hidden black hairunshaved (Jenna,Janette).zip.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Templates\american cumshot bukkake [bangbus] sweet (Kathrin,Janette).rar.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Templates\american porn fucking full movie hairy .zip.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_6.1.7600.16385_none_293ea1e3e6bc5364\black kicking horse voyeur titts black hairunshaved (Melissa).rar.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\japanese cum bukkake [free] titts granny .zip.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\Downloads\xxx several models .rar.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9E41.tmp\hardcore lesbian ejaculation .avi.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\Framework\v4.0.30319\Temporary ASP.NET Files\horse hot (!) hairy .rar.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\black porn blowjob full movie titts .mpeg.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\bukkake girls hole YEâPSè& (Curtney).avi.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Windows\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor\russian nude lingerie big hotel .zip.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Windows\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor\danish action gay full movie .mpg.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE291.tmp\beast licking glans .zip.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\fucking several models balls .mpeg.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Windows\assembly\tmp\xxx masturbation glans ìï .mpg.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\russian horse sperm [bangbus] .zip.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\blowjob hot (!) YEâPSè& .zip.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_6.1.7601.17514_none_d81c96999f75bd77\german lingerie catfight .rar.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Windows\mssrv.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE56E.tmp\russian cum gay lesbian cock beautyfull (Sarah).mpg.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Windows\security\templates\danish animal horse public (Tatjana).rar.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\italian cumshot sperm [bangbus] sweet .mpeg.exe 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2032 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 1296 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 2032 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 2556 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 2636 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 2032 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 1296 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 2168 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 2784 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 2452 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 2960 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 1296 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 2556 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 2636 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 2032 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 1296 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 2784 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 2168 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 2452 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 1188 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 1992 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 484 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 368 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 1692 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 1924 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 1748 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 1612 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 2556 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 2032 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 2636 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 2960 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 2628 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 1636 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 2784 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 2452 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 2364 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 2240 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 1296 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 2168 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 2116 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 484 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 1992 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 2092 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 816 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 364 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 1188 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 2008 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 368 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 1692 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 1924 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 940 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 880 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 1652 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 3012 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 848 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 848 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 2556 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 2556 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 2032 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 2032 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 1612 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 1612 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 2636 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 2636 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 2032 wrote to memory of 1296 2032 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 28 PID 2032 wrote to memory of 1296 2032 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 28 PID 2032 wrote to memory of 1296 2032 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 28 PID 2032 wrote to memory of 1296 2032 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 28 PID 2032 wrote to memory of 2556 2032 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 29 PID 2032 wrote to memory of 2556 2032 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 29 PID 2032 wrote to memory of 2556 2032 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 29 PID 2032 wrote to memory of 2556 2032 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 29 PID 1296 wrote to memory of 2636 1296 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 30 PID 1296 wrote to memory of 2636 1296 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 30 PID 1296 wrote to memory of 2636 1296 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 30 PID 1296 wrote to memory of 2636 1296 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 30 PID 2556 wrote to memory of 2452 2556 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 31 PID 2556 wrote to memory of 2452 2556 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 31 PID 2556 wrote to memory of 2452 2556 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 31 PID 2556 wrote to memory of 2452 2556 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 31 PID 1296 wrote to memory of 2168 1296 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 32 PID 1296 wrote to memory of 2168 1296 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 32 PID 1296 wrote to memory of 2168 1296 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 32 PID 1296 wrote to memory of 2168 1296 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 32 PID 2636 wrote to memory of 2784 2636 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 33 PID 2636 wrote to memory of 2784 2636 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 33 PID 2636 wrote to memory of 2784 2636 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 33 PID 2636 wrote to memory of 2784 2636 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 33 PID 2032 wrote to memory of 2960 2032 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 34 PID 2032 wrote to memory of 2960 2032 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 34 PID 2032 wrote to memory of 2960 2032 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 34 PID 2032 wrote to memory of 2960 2032 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 34 PID 2168 wrote to memory of 1188 2168 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 35 PID 2168 wrote to memory of 1188 2168 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 35 PID 2168 wrote to memory of 1188 2168 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 35 PID 2168 wrote to memory of 1188 2168 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 35 PID 2784 wrote to memory of 484 2784 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 36 PID 2784 wrote to memory of 484 2784 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 36 PID 2784 wrote to memory of 484 2784 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 36 PID 2784 wrote to memory of 484 2784 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 36 PID 2452 wrote to memory of 1992 2452 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 37 PID 2452 wrote to memory of 1992 2452 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 37 PID 2452 wrote to memory of 1992 2452 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 37 PID 2452 wrote to memory of 1992 2452 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 37 PID 1296 wrote to memory of 368 1296 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 38 PID 1296 wrote to memory of 368 1296 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 38 PID 1296 wrote to memory of 368 1296 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 38 PID 1296 wrote to memory of 368 1296 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 38 PID 2636 wrote to memory of 1692 2636 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 39 PID 2636 wrote to memory of 1692 2636 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 39 PID 2636 wrote to memory of 1692 2636 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 39 PID 2636 wrote to memory of 1692 2636 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 39 PID 2556 wrote to memory of 1924 2556 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 40 PID 2556 wrote to memory of 1924 2556 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 40 PID 2556 wrote to memory of 1924 2556 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 40 PID 2556 wrote to memory of 1924 2556 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 40 PID 2960 wrote to memory of 1748 2960 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 41 PID 2960 wrote to memory of 1748 2960 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 41 PID 2960 wrote to memory of 1748 2960 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 41 PID 2960 wrote to memory of 1748 2960 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 41 PID 2032 wrote to memory of 1612 2032 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 42 PID 2032 wrote to memory of 1612 2032 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 42 PID 2032 wrote to memory of 1612 2032 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 42 PID 2032 wrote to memory of 1612 2032 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 42 PID 1296 wrote to memory of 2364 1296 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 44 PID 1296 wrote to memory of 2364 1296 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 44 PID 1296 wrote to memory of 2364 1296 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 44 PID 1296 wrote to memory of 2364 1296 21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe 44
Processes
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"1⤵
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2032 -
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1296 -
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2636 -
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2784 -
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
PID:484 -
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵
- Suspicious behavior: EnumeratesProcesses
PID:2116 -
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:2292
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"8⤵PID:4328
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"9⤵PID:10772
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"8⤵PID:6832
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"8⤵PID:5844
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:3668
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"8⤵PID:7284
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"9⤵PID:10660
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"8⤵PID:5184
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:5672
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:7112
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:2592
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:3924
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"8⤵PID:10496
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:5804
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"8⤵PID:11168
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:7404
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:6996
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:3404
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:6184
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:10204
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:3308
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:7428
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
PID:2628 -
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:2344
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:3540
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"8⤵PID:6856
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"9⤵PID:10832
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"8⤵PID:10392
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:5352
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"8⤵PID:11048
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:7460
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"8⤵PID:11024
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:6056
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:2380
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:4928
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"8⤵PID:7944
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:6980
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:7220
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:4140
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:11104
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:4424
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:8088
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:6180
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:1904
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:3700
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:10584
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:5688
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:10868
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:10328
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:3256
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:5896
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:11184
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:7396
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:11256
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:9396
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:4412
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:10108
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:6124
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:11128
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:10120
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:1692 -
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
PID:940 -
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:2180
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:5304
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"8⤵PID:10936
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:7600
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:3904
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:10136
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:5868
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:11152
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:7860
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:656
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:3868
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:7320
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:10384
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:3576
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:10860
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:5424
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:5892
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:880 -
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:3088
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:5628
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:11072
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:8064
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:4228
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:11240
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:6984
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:10756
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:10264
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:1004
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:5172
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:10852
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:10196
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:4080
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:10668
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:5556
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:10288
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2168 -
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:1188 -
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
PID:816 -
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:2968
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:4488
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"8⤵PID:10952
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:6968
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"8⤵PID:11080
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:7276
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:3784
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:8120
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:5716
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:10320
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:2876
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:4020
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:4188
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:3180
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:3452
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:6308
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:9928
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:4364
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:10840
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:7468
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:5880
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:1636 -
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:1196
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:3504
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:6748
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:8024
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:5460
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:10984
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:10632
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:3112
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:5536
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:10344
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:10368
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:4260
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:7096
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:11008
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:8068
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:2860
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:3856
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:7240
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:9776
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:5988
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:10416
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:7920
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:3284
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:5732
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:10568
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:4448
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:10248
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:368 -
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:2008 -
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:2712
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:4420
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:10464
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:2132
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:4052
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:10928
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:5232
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:10740
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:10304
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:2648
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:3492
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:10488
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:5972
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:10600
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:3468
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:6192
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:10904
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:10212
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:4372
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:10920
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:10272
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:2364 -
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:2424
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:3992
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:6560
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:11064
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:10172
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:3460
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:4768
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:10408
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:6020
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:10684
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:7896
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:5140
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:11192
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:10280
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"3⤵PID:2956
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:3816
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:10144
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:5724
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:11120
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:10336
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"3⤵PID:3272
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:5912
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:7668
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:10796
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:6728
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"3⤵PID:4456
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:11088
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"3⤵PID:7576
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"3⤵PID:8012
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2556 -
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2452 -
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:1992 -
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
PID:2092 -
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:1668
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:4356
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"8⤵PID:10520
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:7568
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"8⤵PID:10716
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:10544
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:3840
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:8044
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:6000
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:7792
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:2500
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:3100
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:10128
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:6736
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:10376
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:3428
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:6340
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:10764
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:10256
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:4656
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:10692
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:6132
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:10944
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:10220
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:2240 -
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:1964
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:4048
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:11200
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:6152
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:10732
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:10296
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:3512
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:6732
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:11016
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:5296
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:5444
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:11160
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:10400
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:1720
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:3756
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:7196
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:11176
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:6808
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:6040
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:7560
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:3264
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:5852
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:10624
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:4564
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:10472
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:4572
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:11144
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:7108
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:1924 -
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:364 -
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:1684
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:4552
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:11000
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:5564
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:10448
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:7608
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:4004
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:11032
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:5944
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:10748
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:10036
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:2372
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:1544
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:6568
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:10708
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:10068
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:3552
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:7124
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:10824
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:7848
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:5240
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:11248
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:10504
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:1652 -
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:2268
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:5544
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:10560
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:4172
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:10788
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:6092
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:10700
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:5180
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"3⤵PID:740
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:4616
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:10528
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:5360
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:10676
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:5060
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"3⤵PID:4036
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:9724
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"3⤵PID:5340
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:10992
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"3⤵PID:7708
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2960 -
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:1748 -
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:1352
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:3392
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:4936
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:10352
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:7676
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"7⤵PID:10640
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:10312
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:4524
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:11112
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:7596
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:2208
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:5220
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:11040
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:5636
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:3676
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:7852
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:6112
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:10808
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:10180
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"3⤵PID:2744
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:3364
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:4828
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:11056
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:5160
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"6⤵PID:10876
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:2056
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:4512
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:11136
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:5152
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:10968
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:4628
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"3⤵PID:1164
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:5268
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:11096
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:7952
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"3⤵PID:3864
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:10960
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"3⤵PID:6060
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:10884
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"3⤵PID:7984
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
PID:1612 -
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:848 -
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:3196
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:5772
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:10576
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:4244
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:10648
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:6100
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:10228
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"3⤵PID:3048
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:4952
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:10724
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:10480
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"3⤵PID:4060
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:10188
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"3⤵PID:5476
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:10360
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"3⤵PID:8176
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
PID:3012 -
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"3⤵PID:3172
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:4880
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:10536
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:7476
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"5⤵PID:10892
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:5568
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"3⤵PID:4236
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:6864
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:10512
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"3⤵PID:6032
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"3⤵PID:10592
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"2⤵PID:3004
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"3⤵PID:4944
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"4⤵PID:10780
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"3⤵PID:7584
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"3⤵PID:10552
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"2⤵PID:3108
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"3⤵PID:10976
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"2⤵PID:5412
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"3⤵PID:10912
-
-
-
C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\21aa399396f8a048b68d0f33ca893460_NeikiAnalytics.exe"2⤵PID:2900
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.0MB
MD524f73979ed65adba9773b56fbd2b817d
SHA16aa1b8e7b6ae19832abd767e178e8b2d82cae0df
SHA25681e6fbc81307b9ddec24588c1a622f7232d6079485c04cc07519ab4f64cfcbbd
SHA51245df89e63ca7357e90f77a51586667d9b6f98939872ea702f852e3d808cb53ca44bb0e99b050de4ab45c18e8c9bfb1206bf9ac7b0cdeedfe49bebfd19ca4a38b