Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
12s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
13/05/2024, 18:14
Behavioral task
behavioral1
Sample
c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe
-
Size
1.4MB
-
MD5
c0d0c5232ab474d77a071f2526ad7350
-
SHA1
ba1ffb993c9fadbae4a15be5ce9e33bb72189acb
-
SHA256
f18e3d450c17050837555716f7953491eae1cec4622262b84118660571c631e9
-
SHA512
4424b70d7cc081157101002a0f92690d4b0e48f038190c69c544f9d318a2dfa58352ad2e17a417c7f4129cdb731876f5108cee938c90d9c6bfdf825ba773f73e
-
SSDEEP
24576:VInO0uV8y5HRpxeMQSJ0yAFJSbHHYchBzj3M8amWsOhSxBP5m:Vl8sH5ambnj33MnmWsOhw5m
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
resource yara_rule behavioral1/memory/2648-0-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/files/0x0007000000015cb9-5.dat upx behavioral1/memory/2828-9-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2400-55-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2600-56-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2164-61-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2648-62-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2648-72-0x00000000052E0000-0x00000000052FE000-memory.dmp upx behavioral1/memory/1008-74-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2400-75-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2600-76-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2828-73-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2164-78-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2780-80-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2968-81-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1076-82-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1008-83-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1508-84-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2648-93-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2656-94-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1412-95-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1244-98-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2980-99-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2988-100-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1768-101-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/804-103-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1244-107-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1412-104-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1912-102-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2084-108-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2944-109-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1208-110-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2724-111-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2932-112-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/896-113-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/420-114-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2944-117-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1584-119-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1100-123-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/3068-122-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/332-124-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1664-125-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1828-128-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2192-129-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1784-130-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2024-131-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1916-134-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1584-132-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/3068-135-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1824-136-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1724-137-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2896-138-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2512-145-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2612-146-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2516-147-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2504-149-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2700-150-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2868-151-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2592-152-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/3320-178-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2648-172-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/3328-179-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/3552-201-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/3564-200-0x0000000000400000-0x000000000041E000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\V: c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File opened (read-only) \??\W: c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File opened (read-only) \??\E: c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File opened (read-only) \??\H: c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File opened (read-only) \??\J: c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File opened (read-only) \??\O: c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File opened (read-only) \??\R: c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File opened (read-only) \??\T: c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File opened (read-only) \??\X: c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File opened (read-only) \??\Z: c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File opened (read-only) \??\A: c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File opened (read-only) \??\K: c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File opened (read-only) \??\L: c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File opened (read-only) \??\P: c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File opened (read-only) \??\S: c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File opened (read-only) \??\Y: c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File opened (read-only) \??\N: c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File opened (read-only) \??\Q: c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File opened (read-only) \??\U: c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File opened (read-only) \??\B: c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File opened (read-only) \??\G: c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File opened (read-only) \??\I: c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File opened (read-only) \??\M: c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe -
Drops file in Program Files directory 15 IoCs
description ioc Process File created C:\Program Files (x86)\Microsoft Office\Templates\xxx fetish several models ìï (Sarah,Jenna).rar.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\IDTemplates\fetish licking .mpg.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Temp\french gay catfight castration .mpg.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\malaysia beastiality several models vagina .rar.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\XML Files\Space Templates\cumshot beastiality hidden (Jenna).zip.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\fetish lesbian high heels (Liz).mpeg.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\animal porn catfight (Ashley,Kathrin).rar.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Update\Download\danish sperm bukkake masturbation cock wifey (Britney).mpeg.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Notebook Templates\african xxx masturbation ash .mpeg.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\trambling catfight .zip.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\microsoft shared\gang bang sleeping (Jade,Ashley).mpg.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\DocumentShare\american lingerie nude public (Sonja).mpg.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File created C:\Program Files\Windows Journal\Templates\chinese gay several models .zip.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File created C:\Program Files\Common Files\Microsoft Shared\handjob hot (!) ash .mpg.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Shared\indian porn lesbian vagina .rar.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe -
Drops file in Windows directory 26 IoCs
description ioc Process File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP6B8E.tmp\malaysia cum beastiality several models .mpeg.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File created C:\Windows\PLA\Templates\gang bang several models .mpeg.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\swedish trambling [milf] pregnant .mpeg.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\african blowjob gang bang sleeping .mpeg.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Templates\brasilian bukkake horse girls YEâPSè& .rar.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File created C:\Windows\assembly\GAC_32\Microsoft.SharePoint.BusinessData.Administration.Client\italian action bukkake [bangbus] wifey .mpeg.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9E41.tmp\norwegian handjob hot (!) titts .mpg.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\italian trambling [milf] cock (Janette,Sarah).rar.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File created C:\Windows\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor.Resources\kicking several models bondage .mpg.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE291.tmp\bukkake animal hot (!) titts shoes .zip.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\action catfight feet lady (Britney).avi.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\african cum girls .avi.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\Framework\v4.0.30319\Temporary ASP.NET Files\spanish xxx catfight .zip.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE56E.tmp\african porn blowjob [free] .zip.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File created C:\Windows\assembly\temp\norwegian horse horse big .avi.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File created C:\Windows\assembly\tmp\american hardcore sperm licking titts .mpeg.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\swedish fucking catfight ash .zip.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File created C:\Windows\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor.Resources\fetish full movie (Jade).avi.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File created C:\Windows\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor\gay beastiality big lady .rar.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File created C:\Windows\assembly\GAC_MSIL\Microsoft.SharePoint.BusinessData.Administration.Client.Intl\hardcore blowjob voyeur cock swallow .rar.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\cum several models .zip.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File created C:\Windows\Downloaded Program Files\norwegian hardcore gay several models titts hairy .zip.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File created C:\Windows\security\templates\spanish hardcore gay big cock castration (Jade).mpeg.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\Downloads\tyrkish gay porn hidden feet granny .rar.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File created C:\Windows\mssrv.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File created C:\Windows\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor\gay [free] traffic (Liz,Melissa).mpg.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 31 IoCs
pid Process 2648 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 2828 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 2648 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 2400 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 2600 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 2828 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 2648 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 2164 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 2400 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 2780 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 2828 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 2968 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 1076 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 2648 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 2600 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 1008 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 1508 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 2400 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 2164 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 2828 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 2980 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 2656 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 2988 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 1768 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 1912 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 2648 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 804 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 2780 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 1076 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 2600 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 2968 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 2648 wrote to memory of 2828 2648 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 28 PID 2648 wrote to memory of 2828 2648 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 28 PID 2648 wrote to memory of 2828 2648 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 28 PID 2648 wrote to memory of 2828 2648 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 28 PID 2648 wrote to memory of 2400 2648 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 29 PID 2648 wrote to memory of 2400 2648 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 29 PID 2648 wrote to memory of 2400 2648 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 29 PID 2648 wrote to memory of 2400 2648 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 29 PID 2828 wrote to memory of 2600 2828 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 30 PID 2828 wrote to memory of 2600 2828 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 30 PID 2828 wrote to memory of 2600 2828 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 30 PID 2828 wrote to memory of 2600 2828 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 30 PID 2400 wrote to memory of 2164 2400 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 31 PID 2400 wrote to memory of 2164 2400 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 31 PID 2400 wrote to memory of 2164 2400 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 31 PID 2400 wrote to memory of 2164 2400 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 31 PID 2828 wrote to memory of 2780 2828 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 32 PID 2828 wrote to memory of 2780 2828 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 32 PID 2828 wrote to memory of 2780 2828 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 32 PID 2828 wrote to memory of 2780 2828 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 32 PID 2648 wrote to memory of 2968 2648 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 33 PID 2648 wrote to memory of 2968 2648 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 33 PID 2648 wrote to memory of 2968 2648 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 33 PID 2648 wrote to memory of 2968 2648 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 33 PID 2600 wrote to memory of 1076 2600 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 34 PID 2600 wrote to memory of 1076 2600 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 34 PID 2600 wrote to memory of 1076 2600 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 34 PID 2600 wrote to memory of 1076 2600 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 34 PID 2400 wrote to memory of 1008 2400 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 35 PID 2400 wrote to memory of 1008 2400 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 35 PID 2400 wrote to memory of 1008 2400 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 35 PID 2400 wrote to memory of 1008 2400 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 35 PID 2164 wrote to memory of 1508 2164 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 36 PID 2164 wrote to memory of 1508 2164 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 36 PID 2164 wrote to memory of 1508 2164 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 36 PID 2164 wrote to memory of 1508 2164 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 36 PID 2828 wrote to memory of 2656 2828 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 37 PID 2828 wrote to memory of 2656 2828 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 37 PID 2828 wrote to memory of 2656 2828 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 37 PID 2828 wrote to memory of 2656 2828 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 37 PID 2648 wrote to memory of 2980 2648 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 38 PID 2648 wrote to memory of 2980 2648 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 38 PID 2648 wrote to memory of 2980 2648 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 38 PID 2648 wrote to memory of 2980 2648 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 38 PID 1076 wrote to memory of 2988 1076 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 39 PID 1076 wrote to memory of 2988 1076 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 39 PID 1076 wrote to memory of 2988 1076 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 39 PID 1076 wrote to memory of 2988 1076 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 39 PID 2780 wrote to memory of 1768 2780 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 40 PID 2780 wrote to memory of 1768 2780 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 40 PID 2780 wrote to memory of 1768 2780 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 40 PID 2780 wrote to memory of 1768 2780 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 40 PID 2600 wrote to memory of 1912 2600 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 41 PID 2600 wrote to memory of 1912 2600 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 41 PID 2600 wrote to memory of 1912 2600 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 41 PID 2600 wrote to memory of 1912 2600 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 41 PID 2968 wrote to memory of 804 2968 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 42 PID 2968 wrote to memory of 804 2968 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 42 PID 2968 wrote to memory of 804 2968 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 42 PID 2968 wrote to memory of 804 2968 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 42 PID 1008 wrote to memory of 1412 1008 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 43 PID 1008 wrote to memory of 1412 1008 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 43 PID 1008 wrote to memory of 1412 1008 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 43 PID 1008 wrote to memory of 1412 1008 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 43
Processes
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"1⤵
- Adds Run key to start application
- Enumerates connected drives
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2648 -
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2828 -
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2600 -
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1076 -
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
PID:2988 -
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:896
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"7⤵PID:1764
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"8⤵PID:4776
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"8⤵PID:7644
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"8⤵PID:13224
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"7⤵PID:4060
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"8⤵PID:7868
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"8⤵PID:7388
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"7⤵PID:5516
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"7⤵PID:1380
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:2516
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"7⤵PID:3680
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"8⤵PID:9280
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"7⤵PID:5732
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"7⤵PID:9048
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:3344
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"7⤵PID:6332
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"7⤵PID:9056
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:5036
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:7840
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:1828
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:3184
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"7⤵PID:5496
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"7⤵PID:10740
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:4284
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:7580
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:13168
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:1668
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:4876
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"7⤵PID:9208
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:7700
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:12752
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:3972
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:8040
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:5504
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:7572
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:13132
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:1912 -
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:332
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:2396
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"7⤵PID:5300
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"7⤵PID:10496
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:4292
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"7⤵PID:2500
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:7596
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:2012
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:4716
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"7⤵PID:2156
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:7628
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:4076
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:7920
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:13232
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:7636
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:1664
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:3144
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:6052
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:11284
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:4472
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:9240
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:7772
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:2148
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:4740
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:7716
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:3912
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:7980
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:13200
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:5404
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:7764
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:13124
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2780 -
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:1768 -
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:1100
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:2404
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"7⤵PID:5744
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"7⤵PID:7708
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"7⤵PID:12660
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:4188
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"7⤵PID:10468
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:6988
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:12644
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:1632
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:4732
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:7692
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:13192
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:3936
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:7556
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:5484
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:7612
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:12652
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:1784
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:3152
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:5512
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:10504
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:4488
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:7724
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:2616
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:4748
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:6672
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:12700
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:4032
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:5752
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:6224
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:11344
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:5468
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:7668
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:12668
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:2656 -
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:2932
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:2288
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:4364
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"7⤵PID:9692
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:7620
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:3636
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:5708
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:6212
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:11588
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:5176
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:7788
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:13248
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:2612
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:3548
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:9272
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:6424
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:11256
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:3336
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:6916
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:12524
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:5076
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:7824
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:1208
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:2504
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:3992
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:8060
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:13216
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:6484
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:10116
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:3444
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:6712
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:2448
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:4312
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:11700
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:9040
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:1724
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:3696
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:7848
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:5000
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:10916
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:3256
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:6188
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:11500
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:4464
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:10720
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:7748
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:12692
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2400 -
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2164 -
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:1508 -
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:2724
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:2592
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"7⤵PID:4160
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"8⤵PID:11476
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"7⤵PID:6296
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"7⤵PID:12636
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:3628
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"7⤵PID:7972
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"7⤵PID:12920
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:5956
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:11268
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:2896
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:3800
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"7⤵PID:5868
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"7⤵PID:11492
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:5672
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:7780
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:13208
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:3264
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:5680
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:7732
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:13240
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:4504
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:12532
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:7588
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:13140
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:2084
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:2512
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:3944
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"7⤵PID:5860
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"7⤵PID:11424
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:5700
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"7⤵PID:9696
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:8992
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:3328
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:6444
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:9264
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:4888
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:6660
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:11468
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:1824
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:3684
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:7964
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:8140
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:5688
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:7740
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:13108
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:1952
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:5976
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:11596
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:4244
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:11276
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:5964
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:11528
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1008 -
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:1412
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:1584
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:3472
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"7⤵PID:7528
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"7⤵PID:7492
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:5020
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"7⤵PID:12516
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:7796
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:2204
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:4944
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:9256
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:4196
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:7832
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:7652
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:3068
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:3508
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:5772
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"7⤵PID:2184
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:6196
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:11320
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:4320
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:7756
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:13160
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:2112
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:4984
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:2472
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:4276
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:7660
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:1244
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:2544
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:3560
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:8012
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:6416
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:10136
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:3320
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:7536
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:4760
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:8476
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:7000
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:11996
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:1916
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:3492
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:6340
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:8612
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:5152
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:964
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:7816
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:1696
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:5188
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:1524
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:7676
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:12684
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:4220
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:5664
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:6204
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:11484
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2968 -
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:804 -
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:2024
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:3248
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:5128
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:8184
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:13256
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:4480
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:11604
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:6324
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:13116
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:2948
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:5052
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:7808
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:4028
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:6272
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:11988
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:6368
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:9248
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:2192
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:3168
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:5716
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:9800
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:5884
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:11452
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:4300
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:7564
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:13148
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:1992
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:4932
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:7604
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:12676
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:4068
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:7856
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:5440
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:10524
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
PID:2980 -
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:420
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:2444
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:4316
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:12508
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:8676
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:4012
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:3516
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:6360
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:9028
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:2868
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:4048
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:11620
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:6352
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:9196
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:3564
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:7048
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:13264
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:5028
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:7684
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:13184
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"2⤵PID:2944
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:1104
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:4724
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:11436
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:4124
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:10460
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:7544
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"2⤵PID:2700
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:3676
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:11460
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:6492
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:8424
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:11220
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"2⤵PID:3552
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:6720
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:9896
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"2⤵PID:4768
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:3984
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"2⤵PID:11444
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.4MB
MD5e4241dedceaa881daedcf0e93d312ef3
SHA16493bad9a0e7b0a13b44f85de7ce2a5335828730
SHA25644e34bc601db98961699aaaf3dd0420a2c46d96285dd5bf85eccd0a2182408de
SHA512830c4fedd6b4c5e513707d169e97795d490bd60cb7fa7411bffa886eb349d04ef38fc3d3fd50e1630f27956ef6beaa052adda6f193646cb5f8918df5bdb79364