Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
21s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
16/05/2024, 10:31
Behavioral task
behavioral1
Sample
dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe
-
Size
373KB
-
MD5
dac28b544a582c4ef948558f94baa2c0
-
SHA1
e682c71f5a889ad42a5f68142675a18c535a7f74
-
SHA256
8ae741dc69f899e5c2d1217d5e3cdfd11773d66e5cdcdca7343dabee6d979cba
-
SHA512
335ab4f75b2e787c0ba5e928a105d86449625f5ea76fedf1e93d6f6e3ef051f68bbd7f0ea772c87b2318b8af777d46dc202dd2786e3f83c3934742b411644a03
-
SSDEEP
6144:xjluQoSqIo5R4nM/40yJN6N9U46KulDAg6c15g7xqVi/qOT8gbs3cJsnREnYdaO:xEQoS+qhLDMsqFvGKsndd
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
resource yara_rule behavioral1/memory/3008-0-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/files/0x0008000000015d72-5.dat upx behavioral1/memory/2616-55-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2704-90-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2816-92-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/1600-94-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/1988-96-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2208-97-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/1472-99-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/1540-102-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/3008-101-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2208-105-0x0000000004DD0000-0x0000000004DED000-memory.dmp upx behavioral1/memory/2616-104-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/1188-108-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2120-117-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/1988-116-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/1472-121-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/604-123-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/1600-114-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2220-120-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2208-119-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2032-113-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2024-112-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2816-110-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2704-107-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/1540-126-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/576-127-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2460-129-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/1188-128-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2060-134-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2120-133-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2460-144-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/812-146-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/1140-145-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2216-148-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/944-147-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2060-149-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/780-141-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/576-142-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/604-140-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/704-137-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/344-136-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2220-135-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2032-132-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2024-131-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/1204-143-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/1208-153-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/928-152-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/704-150-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/1140-130-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/848-155-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2072-157-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/780-156-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2800-160-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/1204-159-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2588-161-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/812-162-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/944-163-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2684-164-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2612-171-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2756-175-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/2384-174-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/1208-170-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral1/memory/928-169-0x0000000000400000-0x000000000041D000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\K: dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File opened (read-only) \??\M: dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File opened (read-only) \??\O: dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File opened (read-only) \??\X: dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File opened (read-only) \??\Z: dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File opened (read-only) \??\A: dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File opened (read-only) \??\E: dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File opened (read-only) \??\S: dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File opened (read-only) \??\U: dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File opened (read-only) \??\W: dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File opened (read-only) \??\G: dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File opened (read-only) \??\I: dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File opened (read-only) \??\J: dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File opened (read-only) \??\L: dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File opened (read-only) \??\Q: dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File opened (read-only) \??\Y: dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File opened (read-only) \??\T: dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File opened (read-only) \??\V: dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File opened (read-only) \??\B: dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File opened (read-only) \??\H: dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File opened (read-only) \??\N: dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File opened (read-only) \??\P: dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File opened (read-only) \??\R: dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe -
Drops file in System32 directory 10 IoCs
description ioc Process File created C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\german fetish cumshot hot (!) \× .mpeg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\System32\DriverStore\Temp\fetish fetish hidden feet sweet .mpeg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\shared\chinese gang bang lesbian catfight gorgeoushorny .mpg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\lesbian hot (!) cock .mpeg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\shared\malaysia xxx cum girls .rar.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\tyrkish horse horse public .mpeg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\System32\LogFiles\Fax\Incoming\black nude voyeur upskirt .rar.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\fucking uncut upskirt .mpeg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\swedish handjob big girly .mpeg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\fucking lesbian masturbation glans .rar.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe -
Drops file in Program Files directory 15 IoCs
description ioc Process File created C:\Program Files\Common Files\Microsoft Shared\russian cumshot xxx [bangbus] .mpg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Update\Download\danish xxx action sleeping ash fishy .rar.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\DocumentShare\blowjob big boots (Sandy).mpeg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\canadian fetish licking feet .zip.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Office\Templates\italian porn fetish girls hole .avi.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Shared\german porn lesbian leather (Janette,Ashley).mpeg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Program Files\Windows Journal\Templates\african horse sleeping .rar.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\gay trambling uncut castration .zip.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\XML Files\Space Templates\british horse xxx several models feet .mpeg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Notebook Templates\trambling licking .zip.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\danish kicking lesbian mature .avi.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\xxx porn licking .avi.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\IDTemplates\action masturbation redhair .zip.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\microsoft shared\kicking lesbian titts hotel .zip.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Temp\british trambling sperm big titts (Tatjana,Melissa).rar.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\winsxs\amd64_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_en-us_0af98f1835676d1b\horse porn catfight cock bedroom (Melissa).mpeg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\assembly\tmp\hardcore porn [milf] castration (Kathrin,Jenna).rar.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Templates\brasilian handjob porn [bangbus] sweet (Samantha,Sonja).rar.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_it-it_f25d066604c2ad34\japanese lesbian horse licking (Christine).mpeg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-h..-hmeshare.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_8c6fc5a7aa8c435d\gang bang beastiality sleeping (Karin).zip.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_a3772de7111797da\xxx blowjob big mistress .avi.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_8bfc34b93f0fdd42\sperm lesbian hole beautyfull .mpg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_2e7f079c3208e549\black blowjob bukkake [free] hole (Jade,Jenna).zip.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor.Resources\gay horse [milf] glans swallow .mpg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\security\templates\fetish full movie .zip.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.1.7601.17514_none_6f0f7833cb71e18d\blowjob fetish lesbian .mpeg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_es-es_0ac4ebfc358e5ec0\bukkake hot (!) nipples black hairunshaved (Liz,Melissa).zip.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\indian lesbian horse uncut legs .mpeg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_6.1.7600.16385_none_293ea1e3e6bc5364\african nude fucking [free] glans (Britney,Ashley).mpeg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_6.1.7600.16385_es-es_8bc7919d3f36cee7\beast horse girls hole .zip.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_netfx-aspnet_installsqlstatetemp_b03f5f7f11d50a3a_6.1.7600.16385_none_16a2bb1dbab1c595\lesbian bukkake sleeping legs .mpg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor.Resources\chinese handjob fucking big .rar.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\Downloads\swedish gang bang voyeur black hairunshaved .mpg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sharedaccess_31bf3856ad364e35_6.1.7600.16385_none_60c2504d62fd4f0e\spanish cumshot nude voyeur leather .rar.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-systempropertiesremote_31bf3856ad364e35_6.1.7600.16385_none_f0ca3430257ea13f\african gang bang horse catfight ìï (Tatjana,Ashley).avi.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_netfx-shared_registry_whidbey_31bf3856ad364e35_6.1.7600.16385_none_c26c5b8280c6af34\american hardcore beastiality [bangbus] .avi.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9E41.tmp\animal hardcore public penetration .zip.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\indian trambling lesbian girls legs .mpg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-h..-hmeshare.resources_31bf3856ad364e35_6.1.7600.16385_es-es_5d6ada54ed6d35a2\xxx public hairy .zip.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_netfx-shared_netfx_20_perfcounter_31bf3856ad364e35_6.1.7600.16385_none_a945e2c500c90142\asian horse action [milf] traffic (Sonja).avi.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\japanese horse horse sleeping .zip.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_de-de_bcc167434bb9b3ea\action masturbation boobs (Sonja).rar.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_0835101f2d90c7b6\french action gang bang [bangbus] .zip.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-ime-eashared-ccshared_31bf3856ad364e35_6.1.7601.17514_none_34400a5790d1d336\african action gang bang licking sm .avi.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_6.1.7600.16385_de-de_5803850b2f40840e\french handjob girls leather .rar.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_bacc7ceffc55dca2\indian porn uncut legs .rar.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_39c9d74ef2ad6c7b\trambling several models .mpg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\assembly\GAC_MSIL\Microsoft.SharePoint.BusinessData.Administration.Client.Intl\canadian trambling sleeping sweet .mpg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\PLA\Templates\german handjob horse lesbian blondie (Kathrin).mpg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Templates\nude handjob several models sm .rar.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_94828572f7ddbf0f\horse public legs .avi.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-h..-hmeshare.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_00225053e03f4c04\french blowjob hardcore [bangbus] glans granny (Sylvia,Sonja).rar.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_6.1.7600.16385_en-us_00f45b041e1e8fd3\canadian lesbian fucking [milf] sweet .mpg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_it-it_97a45841ff925aa0\brasilian trambling fucking big titts .rar.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor\swedish beastiality masturbation (Anniston,Janette).mpg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\swedish xxx bukkake uncut (Christine).zip.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\lingerie cumshot full movie mature .avi.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-h..-hmeshare.resources_31bf3856ad364e35_6.1.7600.16385_en-us_5d9f7d70ed4643fd\lesbian sleeping hole .mpg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-h..-hmeshare.resources_31bf3856ad364e35_6.1.7600.16385_it-it_ea4a469ab7713182\porn several models lady .avi.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\mssrv.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\malaysia fetish uncut .avi.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\Framework\v4.0.30319\Temporary ASP.NET Files\porn fetish masturbation latex .rar.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\Downloads\animal catfight balls .avi.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_6.1.7601.17514_none_d81c96999f75bd77\norwegian cumshot porn [free] .mpeg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-h..-hmeshare.resources_31bf3856ad364e35_6.1.7600.16385_de-de_b4aea777fe683838\african action cum masturbation feet .zip.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_6.1.7600.16385_it-it_8d9f242de8497d58\kicking nude voyeur .zip.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_6.1.7601.17514_none_98b24799b5d08c05\spanish lesbian handjob voyeur high heels .mpeg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_es-es_657d9a203abeb154\canadian bukkake lingerie big .avi.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_2fc4a33adb648f33\chinese cum girls .zip.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_ad7c61fb28607522\italian animal horse licking .mpeg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\Downloaded Program Files\nude lesbian several models shower .mpeg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_6.1.7600.16385_de-de_e30b5ec05031d17d\norwegian porn full movie bedroom .avi.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_de-de_6208b91f46896156\trambling sleeping (Sarah).rar.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sharedfolders-adm_31bf3856ad364e35_6.1.7600.16385_none_af6f98ff87b0e3cc\canadian lingerie kicking [free] legs sm (Christine).mpeg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft.grouppolicy.admtmpleditor_31bf3856ad364e35_6.1.7601.17514_none_39374e2435a71b47\chinese trambling beast masturbation young .mpeg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\winsxs\InstallTemp\british animal [bangbus] hotel .mpg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP6B8E.tmp\cumshot horse masturbation boobs .rar.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\trambling gang bang masturbation glans (Sylvia).mpg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\japanese horse several models bondage .avi.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3008 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 2616 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 3008 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 2704 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 2816 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 2616 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 3008 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 1600 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 1988 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 2208 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 2704 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 1472 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 2616 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 2816 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 3008 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 1540 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 1600 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 1188 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 2032 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 2024 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 2120 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 2208 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 2704 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 2220 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 1988 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 2816 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 344 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 3008 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 1472 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 2616 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 604 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 576 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 2460 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 1540 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 1140 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 1600 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 2216 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 2060 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 1188 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 704 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 2816 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 2704 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 2704 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 2208 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 2208 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 780 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 780 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 1204 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 1204 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 2032 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 2032 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 2024 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 848 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 2220 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 2120 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 3008 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 1988 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 812 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 944 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 2616 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 1472 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 928 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 1208 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 2564 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 3008 wrote to memory of 2616 3008 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 28 PID 3008 wrote to memory of 2616 3008 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 28 PID 3008 wrote to memory of 2616 3008 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 28 PID 3008 wrote to memory of 2616 3008 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 28 PID 2616 wrote to memory of 2704 2616 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 29 PID 2616 wrote to memory of 2704 2616 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 29 PID 2616 wrote to memory of 2704 2616 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 29 PID 2616 wrote to memory of 2704 2616 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 29 PID 3008 wrote to memory of 2816 3008 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 30 PID 3008 wrote to memory of 2816 3008 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 30 PID 3008 wrote to memory of 2816 3008 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 30 PID 3008 wrote to memory of 2816 3008 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 30 PID 2704 wrote to memory of 1600 2704 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 31 PID 2704 wrote to memory of 1600 2704 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 31 PID 2704 wrote to memory of 1600 2704 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 31 PID 2704 wrote to memory of 1600 2704 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 31 PID 2616 wrote to memory of 1988 2616 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 32 PID 2616 wrote to memory of 1988 2616 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 32 PID 2616 wrote to memory of 1988 2616 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 32 PID 2616 wrote to memory of 1988 2616 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 32 PID 2816 wrote to memory of 2208 2816 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 33 PID 2816 wrote to memory of 2208 2816 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 33 PID 2816 wrote to memory of 2208 2816 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 33 PID 2816 wrote to memory of 2208 2816 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 33 PID 3008 wrote to memory of 1472 3008 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 34 PID 3008 wrote to memory of 1472 3008 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 34 PID 3008 wrote to memory of 1472 3008 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 34 PID 3008 wrote to memory of 1472 3008 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 34 PID 1600 wrote to memory of 1540 1600 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 35 PID 1600 wrote to memory of 1540 1600 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 35 PID 1600 wrote to memory of 1540 1600 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 35 PID 1600 wrote to memory of 1540 1600 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 35 PID 2208 wrote to memory of 1188 2208 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 36 PID 2208 wrote to memory of 1188 2208 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 36 PID 2208 wrote to memory of 1188 2208 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 36 PID 2208 wrote to memory of 1188 2208 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 36 PID 2704 wrote to memory of 2032 2704 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 37 PID 2704 wrote to memory of 2032 2704 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 37 PID 2704 wrote to memory of 2032 2704 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 37 PID 2704 wrote to memory of 2032 2704 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 37 PID 1988 wrote to memory of 2024 1988 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 38 PID 1988 wrote to memory of 2024 1988 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 38 PID 1988 wrote to memory of 2024 1988 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 38 PID 1988 wrote to memory of 2024 1988 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 38 PID 2816 wrote to memory of 2120 2816 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 39 PID 2816 wrote to memory of 2120 2816 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 39 PID 2816 wrote to memory of 2120 2816 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 39 PID 2816 wrote to memory of 2120 2816 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 39 PID 2616 wrote to memory of 2220 2616 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 40 PID 2616 wrote to memory of 2220 2616 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 40 PID 2616 wrote to memory of 2220 2616 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 40 PID 2616 wrote to memory of 2220 2616 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 40 PID 1472 wrote to memory of 344 1472 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 41 PID 1472 wrote to memory of 344 1472 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 41 PID 1472 wrote to memory of 344 1472 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 41 PID 1472 wrote to memory of 344 1472 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 41 PID 3008 wrote to memory of 604 3008 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 42 PID 3008 wrote to memory of 604 3008 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 42 PID 3008 wrote to memory of 604 3008 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 42 PID 3008 wrote to memory of 604 3008 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 42 PID 1540 wrote to memory of 576 1540 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 43 PID 1540 wrote to memory of 576 1540 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 43 PID 1540 wrote to memory of 576 1540 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 43 PID 1540 wrote to memory of 576 1540 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 43
Processes
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"1⤵
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3008 -
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2616 -
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2704 -
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1600 -
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1540 -
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵
- Suspicious behavior: EnumeratesProcesses
PID:576 -
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:2800
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:3364
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"9⤵PID:5668
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"10⤵PID:21252
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"9⤵PID:8428
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"9⤵PID:11508
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"9⤵PID:19848
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:4832
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"9⤵PID:8864
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"9⤵PID:16664
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:6204
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:10976
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:3596
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:3416
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:5768
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"9⤵PID:11188
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"9⤵PID:7468
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:8404
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:12500
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:21544
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:4856
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:8980
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:18928
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:6236
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:11588
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:21476
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:2588
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:3428
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:5732
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"9⤵PID:10996
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"9⤵PID:9328
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:8296
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:12448
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:21956
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:5036
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:9316
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:19876
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:6792
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:13796
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:9128
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:3484
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:5960
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:16120
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:8708
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:16200
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:5060
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:9416
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:19220
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:6796
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:11456
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:19640
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
PID:2460 -
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:2684
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:3500
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:5844
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"9⤵PID:11004
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"9⤵PID:6116
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:8280
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:17608
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:5096
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:9140
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:18852
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:6712
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:11516
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:20424
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:3600
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:6048
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:9640
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:8988
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:19132
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:4204
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:9456
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:2752
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:6860
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:13856
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:21648
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:2604
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:3620
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:6072
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:21132
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:8912
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:18360
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:4248
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:9608
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:14752
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:21980
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:6820
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:12464
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:21512
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:3708
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:6128
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:21888
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:8904
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:18368
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:4756
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:10024
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:19632
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:7564
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:11524
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:20452
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:2032 -
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
PID:780 -
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:1368
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:3472
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:7068
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:11572
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:21008
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:5564
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:11012
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:7444
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:8412
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:3496
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:12492
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:8640
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:3152
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:6732
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:14472
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:10496
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:18512
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:5404
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:10648
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:1556
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:7652
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:14832
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:860
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:3920
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:6600
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:12520
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:21880
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:5872
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:11196
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:6724
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:8288
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:4620
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:16764
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:3576
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:7132
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:11028
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:7256
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:13864
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:21616
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:5632
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:20964
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:8388
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:11548
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:19664
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:704 -
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:880
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:4256
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:7644
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:20336
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:13884
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:11804
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:6000
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:8260
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:9432
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:19176
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:3764
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:6940
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:13820
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:21848
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:5904
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:11480
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:20072
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:8396
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:12544
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:21664
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:348
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:2388
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:6548
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:11220
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:10416
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:21640
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:5360
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:10564
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:21672
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:7364
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:14608
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:21928
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:4080
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:6436
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:10524
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:21028
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:5340
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:10548
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:19144
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:7600
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:15104
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1988 -
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:2024 -
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
PID:2216 -
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:2480
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:3964
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:5656
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"9⤵PID:12020
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:9104
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:21424
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:4120
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:10256
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:21500
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:7712
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:12528
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:12960
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:12592
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:1820
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:3788
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:5992
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:22004
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:9972
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:20996
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:4236
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:9528
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:19696
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:7748
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:19600
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:14820
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:21964
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:1004
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:5084
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:9308
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:19680
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:6780
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:11580
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:6428
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:4492
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:8236
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:6004
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:18504
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:6612
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:10408
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:8116
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:1204 -
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:1248
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:3608
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:6652
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:11044
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:7744
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:12536
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:6564
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:5984
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:21084
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:9108
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:20328
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:2080
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:6924
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:11052
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:6148
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:10540
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:11140
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:5644
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:11496
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:19840
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:8420
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:11540
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:19688
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:1928
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:4804
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:8600
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:13828
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:21656
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:6900
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:10508
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:20972
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:4136
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:8048
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:14584
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:21948
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:5820
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:356
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:9408
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:19228
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:2220 -
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:944 -
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:2044
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:4684
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:8724
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:18056
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:6704
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:21856
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:10488
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:19152
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:4112
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:6908
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:12456
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:13344
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:5852
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:14452
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:9012
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:18892
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:2012
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:4876
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:9440
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:19212
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:7144
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:11488
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:19884
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:11472
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:19860
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:4188
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:7244
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:14804
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:6196
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:10080
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:19584
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:2564 -
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:2884
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:4512
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:9076
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:20108
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:7868
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:13904
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:7640
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:4444
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:8248
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:16636
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:6644
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:10592
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:18884
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:664
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:5104
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:9464
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:5664
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:7080
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:12440
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:21528
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:4212
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:7316
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:14812
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:21912
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:6176
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:10096
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:20240
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2816 -
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2208 -
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:1188 -
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
PID:1140 -
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:2628
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:3564
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:6016
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"9⤵PID:11236
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"9⤵PID:20460
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:8896
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:19184
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:4124
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:9156
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:18496
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:7584
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:12472
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:21520
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:12608
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:8380
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:3688
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:5152
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:13924
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:21624
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:9584
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:15204
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:4604
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:9392
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:19724
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:7556
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:21536
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:11556
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:19868
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:2612
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:3852
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:5928
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:21468
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:9400
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:20468
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:4356
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:9424
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:19192
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:7680
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:12432
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:9336
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:12568
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:7288
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:3744
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:5356
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:8244
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:9224
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:1644
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:5056
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:10044
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:19624
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:7884
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:14600
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:21972
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:2060 -
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:2756
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:3888
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:6140
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:10328
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:3996
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:4700
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:10036
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:20248
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:7848
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:20880
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:13892
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:9300
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:3736
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:5452
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:8324
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:9576
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:15260
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:14352
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:4852
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:9472
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:1596
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:7832
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:14592
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:11152
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:236
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:3128
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:7340
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:11036
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:6192
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:11532
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:19704
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:5976
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:18920
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:8872
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:18876
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:3180
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:6768
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:11436
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:10424
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:6864
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:5420
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:10584
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:8232
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:7608
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:18064
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:2120 -
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:812 -
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:2924
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:4748
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:8340
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:13840
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:9352
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:6836
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:10004
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:8968
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:4128
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:7412
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:13916
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:12016
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:13812
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:21592
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:5740
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:11376
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:6936
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:9376
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:20476
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:2972
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:4160
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:7472
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:8220
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:12508
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:11784
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:5788
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:17732
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:9368
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:18912
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:4028
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:6492
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:13804
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:9036
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:5920
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:11204
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:20940
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:8272
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:19612
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:16656
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:848 -
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:1396
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:4840
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:9448
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:19236
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:6164
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:11212
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:20892
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:4180
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:7448
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:13872
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:21632
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:5916
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:10088
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:20348
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:2536
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:4016
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:5168
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:9384
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:18948
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:5156
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:11108
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:8044
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:7972
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:14528
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:21872
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:4000
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:6156
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:12008
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:9984
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:20320
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:5144
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:11020
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:7404
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:7980
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:5764
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:14624
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:21936
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1472 -
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:344 -
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:2072
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:2888
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:4200
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:9964
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:4488
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:7672
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:21076
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:12616
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:21568
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:4504
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:7700
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:13848
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:8368
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:6624
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:10600
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:18900
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:1476
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:1496
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:9616
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:14576
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:21996
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:7840
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:14540
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:21864
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:4480
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:8328
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:5728
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:12480
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:21584
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:6572
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:10532
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:896
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:1208 -
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:712
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:4308
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:7292
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:14616
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:21920
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:6224
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:21896
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:10184
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:21260
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:3664
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:7724
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:12600
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:21492
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:5780
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:7312
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:9600
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:15272
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:2184
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:4612
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:9120
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:19732
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:7592
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:12560
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:21608
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:4520
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:8212
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:12624
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:21576
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:18072
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:6484
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:10012
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:1436
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
PID:604 -
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:2384
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:1936
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:4284
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:9072
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:20256
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:7540
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:13556
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:21904
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:4472
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:8120
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:17504
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:6588
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:10516
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:21092
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:396
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:4692
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:9624
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:14744
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:21988
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:7688
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:9080
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:12576
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:21560
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:4456
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:8312
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:13548
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:21600
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:6636
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:8716
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:15284
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
PID:928 -
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:1908
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:4768
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:8372
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:11564
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:11504
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:6848
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:10072
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:19592
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:4152
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:7380
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:12552
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:21552
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:5680
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:9592
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:15120
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:15664
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"2⤵PID:2288
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:4548
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:7580
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:20900
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:14632
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:22496
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:6580
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:10988
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:21484
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"2⤵PID:3200
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:7304
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:13932
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:9632
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"2⤵PID:6080
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"2⤵PID:10336
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"2⤵PID:9348
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
809KB
MD56995f02f26279a323cc3118e98101101
SHA1b96afe0b0c167b44007c220bb722285c2aaa24b7
SHA25691ed5bce9ef7db756042290f57bb57a69e0a63772f29b6e343a15daff87f9198
SHA512c3ff18590ce4a354d72ba6a9b260b1a8b0587bd6f86edde0f4cfe3906eb1fc08e8c0059cee791b05ed1f77119541e684f4719567f335061bbd1d373892d0f628
-
Filesize
183B
MD59e24dcaecb073f351335679a5fdcf9b9
SHA1fe6ba68ed710598702cc98b391d291a81678d5a1
SHA2561307e292667de3a1a2b96fa341aec26871c1a348e37f8bb3a107e7729c009fa3
SHA512d51b5a96e4d8470dd1ea3e8bfd92cad3f455f30ee6f7d2844b29dfb5b37c57afabc571e9557969cc671472b562f91455c8ee250b912558d8f3db42ca9f5ec9b7