Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
23s -
max time network
138s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
14/05/2024, 22:48
Behavioral task
behavioral1
Sample
3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe
-
Size
333KB
-
MD5
3b74a5c958189cd007bff2c1fc7f5fe0
-
SHA1
4260bfe8d7e7294842727a9f986746fbdcc0c01e
-
SHA256
a64b2e5652c2cd18235b65ef4d287e28caee3423cdb6581deef2017a76f0d9a2
-
SHA512
63ff357829520a5ed93b4413889b1848956b5caba2631acc345c222a9d71f045f00fb5aa2966aa9b6a0e2d4aa39466539647408dc620c838c5a1b997f4830133
-
SSDEEP
6144:SjluQoSKIo5RHrGBV9mHSIoRGpN5gjV1sg+tqixGl68Gi+THdOvXAKmvu+:SEQoSezrwv/RAN5kp+ciEiigHgYm+
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
resource yara_rule behavioral1/memory/2992-0-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/files/0x0029000000015d0c-5.dat upx behavioral1/memory/2540-61-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/2556-89-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/2992-90-0x00000000051E0000-0x00000000051FF000-memory.dmp upx behavioral1/memory/2892-91-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/3028-93-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/2288-96-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/760-95-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/2176-97-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/1636-99-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/2992-98-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/2540-101-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/1628-102-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/2892-107-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/2992-106-0x00000000051E0000-0x00000000051FF000-memory.dmp upx behavioral1/memory/2288-105-0x0000000004680000-0x000000000469F000-memory.dmp upx behavioral1/memory/2556-104-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/352-109-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/3028-108-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/1548-111-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/2288-110-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/1528-113-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/2120-117-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/2176-116-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/2112-115-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/1628-121-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/1636-120-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/588-123-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/264-122-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/3028-124-0x0000000001F70000-0x0000000001F8F000-memory.dmp upx behavioral1/memory/1476-126-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/2612-125-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/800-128-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/352-127-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/1516-130-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/1548-129-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/884-133-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/540-135-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/2112-132-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/760-134-0x0000000004AA0000-0x0000000004ABF000-memory.dmp upx behavioral1/memory/264-136-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/588-138-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/1476-139-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/1624-140-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/800-142-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/1516-143-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/884-144-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/2460-146-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/540-145-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/1692-147-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/1624-148-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/1796-150-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/1616-152-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/1552-154-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/804-155-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/2772-158-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/2128-156-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/1724-151-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/1692-159-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/2936-162-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/1504-161-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/1612-163-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral1/memory/2632-164-0x0000000000400000-0x000000000041F000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\E: 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File opened (read-only) \??\J: 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File opened (read-only) \??\R: 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File opened (read-only) \??\X: 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File opened (read-only) \??\A: 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File opened (read-only) \??\H: 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File opened (read-only) \??\P: 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File opened (read-only) \??\U: 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File opened (read-only) \??\W: 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File opened (read-only) \??\Y: 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File opened (read-only) \??\Z: 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File opened (read-only) \??\K: 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File opened (read-only) \??\N: 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File opened (read-only) \??\O: 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File opened (read-only) \??\S: 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File opened (read-only) \??\M: 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File opened (read-only) \??\Q: 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File opened (read-only) \??\T: 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File opened (read-only) \??\V: 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File opened (read-only) \??\B: 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File opened (read-only) \??\G: 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File opened (read-only) \??\I: 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File opened (read-only) \??\L: 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe -
Drops file in System32 directory 10 IoCs
description ioc Process File created C:\Windows\SysWOW64\IME\shared\african gay gay voyeur (Sarah).mpg.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\brasilian fetish full movie 40+ .avi.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\german horse gang bang girls .mpg.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\System32\DriverStore\Temp\japanese xxx [milf] 40+ .rar.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\french action [free] .avi.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\black trambling animal voyeur .rar.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\shared\kicking action masturbation upskirt (Sonja).rar.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\beast sperm several models .mpg.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\System32\LogFiles\Fax\Incoming\chinese lingerie kicking girls penetration .mpeg.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\italian xxx girls 40+ (Jenna,Sarah).avi.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe -
Drops file in Program Files directory 15 IoCs
description ioc Process File created C:\Program Files\Common Files\Microsoft Shared\chinese cumshot animal [free] circumcision .mpeg.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\gang bang cum [free] bondage (Anniston).rar.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\microsoft shared\canadian fucking lesbian granny (Janette,Jenna).mpeg.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\DocumentShare\horse masturbation .mpeg.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Office\Templates\beastiality nude lesbian .mpeg.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Notebook Templates\tyrkish kicking hot (!) (Christine).rar.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\trambling beast [free] lady (Jade).zip.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Shared\beast hidden latex (Sandy,Sonja).rar.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Program Files\Windows Journal\Templates\swedish xxx action hidden sm .mpeg.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\swedish animal hidden (Janette,Curtney).mpg.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\lingerie catfight lady (Sandy).rar.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\IDTemplates\american fucking girls boobs .avi.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Temp\xxx blowjob [milf] penetration .mpeg.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Update\Download\japanese gay voyeur 50+ .avi.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\XML Files\Space Templates\japanese blowjob catfight .avi.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\winsxs\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_a3772de7111797da\spanish nude public glans latex .zip.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft.grouppolicy.admtmpleditor_31bf3856ad364e35_6.1.7601.17514_none_39374e2435a71b47\german lesbian blowjob [bangbus] ash lady .mpeg.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_0835101f2d90c7b6\lingerie several models high heels (Liz).rar.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-d..-ime-eashared-proxy_31bf3856ad364e35_6.1.7600.16385_none_965db382b6fef5cb\sperm big glans .zip.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9E41.tmp\swedish bukkake bukkake full movie nipples bedroom .zip.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_515dc677700303ec\american cum [milf] ash .rar.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_6.1.7601.17514_none_f3c374fc18118ca2\indian fetish catfight nipples .rar.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor.Resources\italian action [free] girly .mpg.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_6.1.7601.17514_none_98b24799b5d08c05\american gang bang full movie cock redhair .zip.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-p2p-pnrp-adm_31bf3856ad364e35_6.1.7600.16385_none_5499606faffb3f9f\chinese fetish masturbation legs .mpg.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\german gang bang sleeping legs redhair .mpg.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_bacc7ceffc55dca2\trambling catfight traffic .rar.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_39c9d74ef2ad6c7b\american gang bang gang bang full movie mistress (Sonja).mpg.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\winsxs\wow64_microsoft-windows-sharedaccess_31bf3856ad364e35_6.1.7600.16385_none_6b16fa9f975e1109\tyrkish action beastiality hidden sweet .avi.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_6.1.7600.16385_none_cd2006602e5ee22e\american cum uncut girly (Sandy,Samantha).rar.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_en-us_aedaf3947d09fbe5\french gay public (Jenna).mpg.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft.grouppolicy.admtmpleditor_31bf3856ad364e35_6.1.7601.17514_none_dd18b2a07d49aa11\canadian lesbian gang bang [bangbus] boobs .rar.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE56E.tmp\lingerie cum voyeur nipples .mpg.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_es-es_0ac4ebfc358e5ec0\tyrkish handjob full movie high heels .avi.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_netfx-aspnet_installsqlstatetemp_b03f5f7f11d50a3a_6.1.7600.16385_none_16a2bb1dbab1c595\asian porn [milf] upskirt .mpg.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\assembly\temp\chinese gang bang public (Janette,Gina).mpeg.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sharedfoldersui_31bf3856ad364e35_6.1.7600.16385_none_1412267f4b3bb985\handjob blowjob masturbation (Tatjana,Sonja).avi.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor\beastiality full movie Ôë .mpeg.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-h..-hmeshare.resources_31bf3856ad364e35_6.1.7600.16385_en-us_5d9f7d70ed4643fd\malaysia action bukkake licking circumcision .zip.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_6.1.7600.16385_none_3d98a610fed70b75\handjob hot (!) .avi.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\black animal trambling several models hotel .avi.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_6.1.7600.16385_it-it_18a6fde3093acac7\italian fetish kicking uncut feet lady .rar.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_netfx-shared_netfx_20_mscorwks_31bf3856ad364e35_6.1.7600.16385_none_dba3691c6002e10e\russian cum [bangbus] .avi.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_it-it_963e6ae24c653bfe\gang bang gay catfight 50+ .mpeg.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_3863e9ef3f804dd9\indian xxx lesbian ash high heels (Melissa,Janette).avi.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-ime-eashared-ccshared_31bf3856ad364e35_6.1.7601.17514_none_d8216ed3d8746200\chinese horse bukkake uncut nipples high heels (Tatjana,Jenna).avi.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_94828572f7ddbf0f\nude horse hidden femdom .rar.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-ime-eashared-ccshared_31bf3856ad364e35_6.1.7601.17514_none_34400a5790d1d336\british lesbian lesbian (Jenna).mpeg.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\horse lesbian YEâPSè& .rar.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP6B8E.tmp\tyrkish fucking big legs shoes .mpg.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_6.1.7600.16385_none_293ea1e3e6bc5364\lesbian cumshot licking gorgeoushorny (Janette,Ashley).zip.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_6.1.7600.16385_de-de_e30b5ec05031d17d\american fucking trambling full movie legs (Samantha,Liz).zip.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\mssrv.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-p..al-securitytemplate_31bf3856ad364e35_6.1.7600.16385_none_49dd84a06c7c8863\indian handjob hidden cock .rar.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_it-it_f25d066604c2ad34\canadian horse lesbian masturbation swallow (Britney,Sarah).avi.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_6.1.7600.16385_es-es_00bfb7e81e458178\horse public ejaculation (Jenna).rar.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Templates\asian sperm beastiality masturbation .avi.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-h..-hmeshare.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_8c6fc5a7aa8c435d\swedish beastiality [milf] feet .zip.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sx-shared_31bf3856ad364e35_6.1.7600.16385_none_9498b282333b64ec\hardcore lesbian legs (Jade).mpeg.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_ac16749b75335680\kicking cumshot girls feet 40+ (Sandy,Anniston).mpeg.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-m..-temptable-provider_31bf3856ad364e35_6.1.7600.16385_none_1dd3ce8d1e7524cd\black gang bang horse licking glans stockings .rar.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\brasilian trambling xxx big legs black hairunshaved .zip.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\porn porn masturbation lady .avi.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_6.1.7600.16385_none_99b74194b7347cab\action several models .zip.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Templates\cumshot horse uncut beautyfull .rar.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_de-de_60a2cbbf935c42b4\gang bang girls hotel .rar.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-sharedfoldersui_31bf3856ad364e35_6.1.7600.16385_none_b7f38afb92de484f\canadian lesbian big cock wifey .avi.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_netfx-shared_netfx_20_perfcounter_31bf3856ad364e35_6.1.7600.16385_none_4d274741486b900c\swedish horse horse several models hole stockings (Jade).zip.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\PLA\Templates\black blowjob [bangbus] hole .mpg.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_2fc4a33adb648f33\lingerie fetish catfight feet .rar.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\winsxs\Temp\animal cum several models .avi.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_6.1.7600.16385_de-de_5803850b2f40840e\cumshot beastiality [bangbus] boobs (Sarah).avi.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_es-es_aea650787d30ed8a\russian beast lesbian hidden .avi.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_de-de_6208b91f46896156\xxx cum sleeping stockings .mpeg.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_en-us_65b23d3c3a97bfaf\chinese fucking sleeping .mpg.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.1.7601.17514_none_6f0f7833cb71e18d\italian animal horse voyeur titts ejaculation .avi.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_en-us_0af98f1835676d1b\gay horse several models .mpg.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_ad7c61fb28607522\american lingerie animal [bangbus] nipples gorgeoushorny (Jade,Sylvia).mpg.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sharedaccess_31bf3856ad364e35_6.1.7600.16385_none_60c2504d62fd4f0e\american blowjob beastiality masturbation .rar.exe 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2992 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 2540 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 2992 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 2556 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 2892 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 2540 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 2992 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 3028 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 2288 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 760 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 2556 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 2176 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 2892 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 2540 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 2992 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 1636 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 1628 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 3028 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 2612 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 352 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 2556 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 2288 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 760 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 1528 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 1548 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 2892 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 2540 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 2120 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 2112 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 2176 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 2992 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 588 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 264 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 1628 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 1476 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 1636 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 800 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 3028 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 1516 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 884 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 2612 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 2556 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 2288 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 352 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 2460 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 540 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 760 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 760 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 1624 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 1624 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 1796 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 1796 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 1616 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 1616 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 1724 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 1724 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 1552 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 1552 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 2892 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 2892 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 2540 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 2540 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 2992 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 2992 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 2992 wrote to memory of 2540 2992 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 28 PID 2992 wrote to memory of 2540 2992 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 28 PID 2992 wrote to memory of 2540 2992 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 28 PID 2992 wrote to memory of 2540 2992 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 28 PID 2540 wrote to memory of 2556 2540 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 29 PID 2540 wrote to memory of 2556 2540 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 29 PID 2540 wrote to memory of 2556 2540 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 29 PID 2540 wrote to memory of 2556 2540 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 29 PID 2992 wrote to memory of 2892 2992 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 30 PID 2992 wrote to memory of 2892 2992 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 30 PID 2992 wrote to memory of 2892 2992 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 30 PID 2992 wrote to memory of 2892 2992 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 30 PID 2556 wrote to memory of 3028 2556 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 31 PID 2556 wrote to memory of 3028 2556 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 31 PID 2556 wrote to memory of 3028 2556 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 31 PID 2556 wrote to memory of 3028 2556 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 31 PID 2540 wrote to memory of 760 2540 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 32 PID 2540 wrote to memory of 760 2540 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 32 PID 2540 wrote to memory of 760 2540 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 32 PID 2540 wrote to memory of 760 2540 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 32 PID 2892 wrote to memory of 2288 2892 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 33 PID 2892 wrote to memory of 2288 2892 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 33 PID 2892 wrote to memory of 2288 2892 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 33 PID 2892 wrote to memory of 2288 2892 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 33 PID 2992 wrote to memory of 2176 2992 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 34 PID 2992 wrote to memory of 2176 2992 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 34 PID 2992 wrote to memory of 2176 2992 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 34 PID 2992 wrote to memory of 2176 2992 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 34 PID 3028 wrote to memory of 1636 3028 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 35 PID 3028 wrote to memory of 1636 3028 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 35 PID 3028 wrote to memory of 1636 3028 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 35 PID 3028 wrote to memory of 1636 3028 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 35 PID 2556 wrote to memory of 1628 2556 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 36 PID 2556 wrote to memory of 1628 2556 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 36 PID 2556 wrote to memory of 1628 2556 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 36 PID 2556 wrote to memory of 1628 2556 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 36 PID 2288 wrote to memory of 2612 2288 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 37 PID 2288 wrote to memory of 2612 2288 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 37 PID 2288 wrote to memory of 2612 2288 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 37 PID 2288 wrote to memory of 2612 2288 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 37 PID 760 wrote to memory of 352 760 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 38 PID 760 wrote to memory of 352 760 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 38 PID 760 wrote to memory of 352 760 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 38 PID 760 wrote to memory of 352 760 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 38 PID 2892 wrote to memory of 1548 2892 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 39 PID 2892 wrote to memory of 1548 2892 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 39 PID 2892 wrote to memory of 1548 2892 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 39 PID 2892 wrote to memory of 1548 2892 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 39 PID 2540 wrote to memory of 1528 2540 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 40 PID 2540 wrote to memory of 1528 2540 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 40 PID 2540 wrote to memory of 1528 2540 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 40 PID 2540 wrote to memory of 1528 2540 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 40 PID 2176 wrote to memory of 2112 2176 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 41 PID 2176 wrote to memory of 2112 2176 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 41 PID 2176 wrote to memory of 2112 2176 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 41 PID 2176 wrote to memory of 2112 2176 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 41 PID 2992 wrote to memory of 2120 2992 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 42 PID 2992 wrote to memory of 2120 2992 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 42 PID 2992 wrote to memory of 2120 2992 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 42 PID 2992 wrote to memory of 2120 2992 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 42 PID 1636 wrote to memory of 264 1636 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 43 PID 1636 wrote to memory of 264 1636 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 43 PID 1636 wrote to memory of 264 1636 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 43 PID 1636 wrote to memory of 264 1636 3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe 43
Processes
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"1⤵
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2992 -
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2540 -
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2556 -
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3028 -
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1636 -
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵
- Suspicious behavior: EnumeratesProcesses
PID:264 -
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:804
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:3532
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"9⤵PID:5972
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"10⤵PID:12912
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"9⤵PID:9184
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"9⤵PID:17136
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:4980
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"9⤵PID:9148
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"9⤵PID:16712
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:6820
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"9⤵PID:13340
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"9⤵PID:23304
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:11700
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:3448
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:5948
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"9⤵PID:15004
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:9128
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"9⤵PID:12384
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:17304
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:4944
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:9464
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"9⤵PID:12476
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:17264
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:7080
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:15248
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:11800
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:2772
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:3644
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:6108
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"9⤵PID:12872
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:9200
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:16240
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:5048
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:9612
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"9⤵PID:22568
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:17144
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:7304
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:13712
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:11808
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:3612
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:6092
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:13672
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:9532
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:12368
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:17368
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:5024
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:9516
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:11112
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:16148
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:7004
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:12688
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:23288
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:11608
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
PID:1476 -
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:2156
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:3588
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:6004
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"9⤵PID:14868
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:9212
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"9⤵PID:16964
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:16296
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:5016
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:11692
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:6936
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:15960
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:11352
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:21796
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:3484
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:5840
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:12596
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:23324
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:9120
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:11040
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:16460
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:4968
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:9192
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:17096
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:16272
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:6292
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:15056
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:11640
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:2640
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:3732
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:6024
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:12880
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:9588
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:16088
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:4472
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:11272
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:7356
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:12720
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:11536
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:12484
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:3692
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:5440
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:15344
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:9140
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:21804
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:17256
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:4308
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:9696
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:21772
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:16468
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:7344
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:15320
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:11760
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:1628 -
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
PID:588 -
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:1612
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:3428
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:5736
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"9⤵PID:12920
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:8684
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"9⤵PID:15764
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:16224
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:4928
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:9164
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"9⤵PID:21788
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:16120
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:6940
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:19632
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:12784
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:3360
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:5512
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:12856
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:8544
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:17984
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:11776
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:23296
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:4752
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:8876
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:16948
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:7084
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:16376
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:11344
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:14448
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:2388
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:3396
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:5652
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:13752
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:8788
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:12468
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:16208
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:4788
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:8568
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:15272
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:11488
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:6184
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:15220
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:11328
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:21764
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:3416
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:5708
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:12840
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:8900
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:16428
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:4912
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:9172
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:22584
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:17156
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:6236
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:15304
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:11392
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:14428
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:1516 -
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:2484
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:3412
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:6800
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:15164
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:11456
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:11672
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:5244
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:9828
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:11980
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:15892
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:7516
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:15288
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:15908
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:4044
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:6504
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:12896
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:9652
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:12376
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:16256
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:4828
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:9820
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:12616
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:16248
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:7640
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:15200
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:16512
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:2632
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:3904
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:6388
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:12936
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:11448
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:14600
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:4808
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:9848
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:12044
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:15876
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:7920
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:4488
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:12824
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:3840
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:6436
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:12580
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:9424
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:17820
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:16104
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:4768
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:11304
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:7940
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:14120
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:16924
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:760 -
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:352 -
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
PID:2460 -
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:2848
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:4212
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:7572
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"9⤵PID:16336
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:11676
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:5568
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:14656
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:9744
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:11972
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:16760
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:3492
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:6976
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:15456
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:11624
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:5284
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:12928
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:7584
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:15596
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:11552
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:1928
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:3864
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:6344
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:13640
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:9712
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:23548
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:16444
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:4760
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:11296
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:7588
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:15632
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:11408
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:3752
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:5852
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:15528
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:9728
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:11732
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:16540
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:4604
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:11900
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:7472
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:15604
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:12832
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:540 -
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:2492
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:4228
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:7864
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:17224
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:12800
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:6204
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:12672
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:9448
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:4996
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:16080
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:4112
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:6768
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:17028
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:11528
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:14436
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:6068
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:12888
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:9456
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:17120
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:16192
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:3048
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:4052
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:6924
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:15652
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:11632
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:5908
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:12752
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:8780
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:15580
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:15968
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:3292
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:6696
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:16360
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:11724
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:5224
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:15020
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:7548
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:13584
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:16216
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:1528 -
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:1552 -
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:3096
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:5320
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:11164
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:8552
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:15296
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:11708
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:23312
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:4652
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:8676
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:12412
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:16420
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:7160
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:15788
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:11684
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:2304
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:5000
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:9044
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:15804
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:16056
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:6888
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:15844
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:11600
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:4256
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:7800
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:15536
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:12768
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:6272
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:12760
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:9432
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:22592
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:16096
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:1796 -
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:2768
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:5144
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:11892
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:8164
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:2276
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:11592
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:4416
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:8144
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:15352
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:11360
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:12108
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:6660
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:15780
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:11440
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:21812
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"3⤵PID:764
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:4520
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:8868
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:15520
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:15916
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:7048
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:15264
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:11384
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"3⤵PID:4164
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:7404
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:15812
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:11320
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"3⤵PID:6104
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:15012
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"3⤵PID:9596
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:12004
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"3⤵PID:16232
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2892 -
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2288 -
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:2612 -
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
PID:800 -
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:2568
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:4080
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:6596
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"9⤵PID:13320
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:11792
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:4596
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:13624
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:8108
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:15504
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:11768
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:4000
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:6464
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:16940
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:11576
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:3184
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:9764
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:22396
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:15884
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:8028
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:20464
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:11400
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:2832
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:3816
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:6224
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:15564
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:9440
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:17104
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:16072
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:4688
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:9836
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:12276
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:16264
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:7772
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:19696
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:12944
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:3832
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:6252
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:13304
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:9736
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:4516
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:16908
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:4800
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:11936
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:7692
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:15836
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:12728
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:23332
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:884 -
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:1744
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:3828
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:7136
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"8⤵PID:15180
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:11472
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:14580
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:5728
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:15028
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:8892
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:15796
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:16492
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:3268
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:6780
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:15572
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:11464
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:14568
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:5172
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:11312
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:7396
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:15044
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:11512
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:11988
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:2936
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:3792
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:6192
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:15312
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:9720
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:12156
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:16484
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:4664
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:11288
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:7524
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:15772
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:11648
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:3776
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:6164
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:13632
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:9580
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:16064
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:4620
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:9792
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:21780
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:15868
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:7488
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:19704
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:11584
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:1548 -
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:1692
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:3260
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:5376
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:12588
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:7888
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:12736
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:16288
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:4672
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:8716
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:16200
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:7148
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:15212
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:9872
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:22576
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:17504
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:2520
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:4512
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:9668
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:15860
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:7368
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:15512
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:11544
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:4456
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:7856
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:15544
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:16352
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:6752
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:14532
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:11864
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:1624 -
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:3016
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:4908
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:11280
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:7912
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:15852
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:12808
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:4476
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:8044
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:12776
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:15612
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:6716
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:15240
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:11912
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"3⤵PID:2116
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:4300
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:8120
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:18048
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:11376
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:6312
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:13616
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:11616
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"3⤵PID:4136
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:6156
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:16184
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:11784
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"3⤵PID:5200
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:13376
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"3⤵PID:9108
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:23280
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"3⤵PID:16112
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2176 -
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:2112 -
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:1504
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:3192
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:5408
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:13744
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:7716
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:15924
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:16476
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:4628
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:8560
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:19608
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:11520
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:14632
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:7120
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:15660
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:11424
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:20448
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:2784
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:4368
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:9564
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"7⤵PID:12420
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:15900
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:7384
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:17448
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:11752
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:4448
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:7952
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:15280
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:16280
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:6736
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:16452
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:11716
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:1616 -
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:2644
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:4824
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:10448
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:17112
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:8048
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:15620
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:11416
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:4492
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:7740
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:15644
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:16520
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:6760
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:16436
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:11736
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"3⤵PID:696
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:4316
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:7960
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:17392
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:16156
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:6324
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:12864
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:9704
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:12208
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:16916
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"3⤵PID:4184
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:7424
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:20472
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:11744
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"3⤵PID:5776
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:12848
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"3⤵PID:9572
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"3⤵PID:16140
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
PID:2120 -
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"3⤵PID:2128
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:3116
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:5336
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:12704
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:7412
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:17968
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:11496
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:14452
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:4612
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:7648
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:18780
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:11568
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:23196
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:6876
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:15828
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:11368
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:12320
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"3⤵PID:348
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:5060
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:9556
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"6⤵PID:17976
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:16132
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:7288
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:15328
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:11504
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:22552
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"3⤵PID:4408
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:8212
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:15588
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:11560
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"3⤵PID:6628
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:12904
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"3⤵PID:11432
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"3⤵PID:14524
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
PID:1724 -
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"3⤵PID:2700
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:4644
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:11840
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:23264
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:8092
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:5072
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:16172
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"3⤵PID:4436
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:7752
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:16304
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:16892
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"3⤵PID:6640
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:16344
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"3⤵PID:11480
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"2⤵PID:1792
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"3⤵PID:4348
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:8008
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"5⤵PID:15336
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:12792
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"3⤵PID:6364
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:12572
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"3⤵PID:11336
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"2⤵PID:4204
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"3⤵PID:7656
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"4⤵PID:17992
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"3⤵PID:12816
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"2⤵PID:5232
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"3⤵PID:15820
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"2⤵PID:9540
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"3⤵PID:12500
-
-
-
C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b74a5c958189cd007bff2c1fc7f5fe0_NeikiAnalytics.exe"2⤵PID:17380
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.4MB
MD5ac9da4df9f5c3406b3665961fbe93ce6
SHA199bb317e867713dcd8b6456c6d18042c5dcd07c2
SHA256f5e54986004a73a744e347c00d06b58110469bdad51e0da17c596249d0c7da50
SHA512b870e26dbedc6e40a97515f483d69b48cd00c6406af790d5b78a9cf8802851a1927e4acd68f4977831bf1f8e9f256c2b8db98acff5f8592e9e0bec4dfd85c511
-
Filesize
183B
MD51a44a5343ad836adb77493dac2feddff
SHA1eef6314d52483dfac6d7a56368de30cc809b7096
SHA256c036277900d0d41f52255e2633a448d70ad75b736f425acdc93d60e9fe6000c5
SHA51295a5ccb194e9dc54e8ebd63c8e3d83bc32c5bf7f84275367291ee10733fb56fea9f396d7d6f5b7671b4201dddd63e2f68ad6fe32bbba27b4a234812107b74f48