Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
11s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
16/05/2024, 10:31
Behavioral task
behavioral1
Sample
dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe
-
Size
373KB
-
MD5
dac28b544a582c4ef948558f94baa2c0
-
SHA1
e682c71f5a889ad42a5f68142675a18c535a7f74
-
SHA256
8ae741dc69f899e5c2d1217d5e3cdfd11773d66e5cdcdca7343dabee6d979cba
-
SHA512
335ab4f75b2e787c0ba5e928a105d86449625f5ea76fedf1e93d6f6e3ef051f68bbd7f0ea772c87b2318b8af777d46dc202dd2786e3f83c3934742b411644a03
-
SSDEEP
6144:xjluQoSqIo5R4nM/40yJN6N9U46KulDAg6c15g7xqVi/qOT8gbs3cJsnREnYdaO:xEQoS+qhLDMsqFvGKsndd
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 9 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-711569230-3659488422-571408806-1000\Control Panel\International\Geo\Nation dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-711569230-3659488422-571408806-1000\Control Panel\International\Geo\Nation dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-711569230-3659488422-571408806-1000\Control Panel\International\Geo\Nation dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-711569230-3659488422-571408806-1000\Control Panel\International\Geo\Nation dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-711569230-3659488422-571408806-1000\Control Panel\International\Geo\Nation dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-711569230-3659488422-571408806-1000\Control Panel\International\Geo\Nation dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-711569230-3659488422-571408806-1000\Control Panel\International\Geo\Nation dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-711569230-3659488422-571408806-1000\Control Panel\International\Geo\Nation dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-711569230-3659488422-571408806-1000\Control Panel\International\Geo\Nation dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
resource yara_rule behavioral2/memory/2732-0-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/files/0x0002000000022fc9-5.dat upx behavioral2/memory/4664-26-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/4884-150-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/2680-152-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/1048-181-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/448-182-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/4536-183-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/4964-184-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/4436-185-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/5024-186-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/3556-187-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/3980-190-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/3208-189-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/2732-188-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/2308-192-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/4664-191-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/4884-193-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/3932-194-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/2032-196-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/2680-195-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/3256-202-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/4536-201-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/4480-204-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/4964-203-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/448-200-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/1060-199-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/1048-198-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/5024-206-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/4436-205-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/5044-208-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/3980-211-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/1136-214-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/3932-213-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/2308-212-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/3208-210-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/1220-209-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/3556-207-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/2032-215-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/1260-218-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/4396-217-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/2880-216-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/3028-220-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/3256-219-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/4480-221-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/2636-222-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/4404-223-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/1984-224-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/5044-226-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/5220-228-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/1220-227-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/5272-230-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/516-229-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/5416-235-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/5360-234-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/1136-233-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/5340-232-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/1236-231-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/2880-236-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/5516-239-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/1260-238-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/5500-237-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/3324-240-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/3028-241-0x0000000000400000-0x000000000041D000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\M: dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File opened (read-only) \??\S: dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File opened (read-only) \??\U: dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File opened (read-only) \??\Z: dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File opened (read-only) \??\E: dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File opened (read-only) \??\G: dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File opened (read-only) \??\I: dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File opened (read-only) \??\V: dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File opened (read-only) \??\W: dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File opened (read-only) \??\B: dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File opened (read-only) \??\H: dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File opened (read-only) \??\N: dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File opened (read-only) \??\X: dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File opened (read-only) \??\A: dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File opened (read-only) \??\O: dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File opened (read-only) \??\R: dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File opened (read-only) \??\P: dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File opened (read-only) \??\Q: dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File opened (read-only) \??\T: dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File opened (read-only) \??\Y: dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File opened (read-only) \??\J: dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File opened (read-only) \??\K: dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File opened (read-only) \??\L: dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe -
Drops file in System32 directory 12 IoCs
description ioc Process File created C:\Windows\SysWOW64\config\systemprofile\indian handjob hardcore licking glans .mpeg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\tyrkish action beast lesbian .mpg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\fucking public .zip.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\brasilian horse horse licking cock YEâPSè& .mpg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\System32\DriverStore\Temp\malaysia blowjob sleeping traffic (Ashley,Liz).mpg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\norwegian lesbian lesbian (Karin).zip.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\xxx sleeping high heels .rar.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\System32\LogFiles\Fax\Incoming\black gang bang beast [bangbus] glans beautyfull .zip.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\bukkake public .avi.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\sperm hot (!) hole .mpeg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\lesbian catfight cock wifey .mpg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\swedish gang bang sperm [bangbus] bedroom .avi.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe -
Drops file in Program Files directory 19 IoCs
description ioc Process File created C:\Program Files\Microsoft Office\Updates\Download\black action fucking [milf] 40+ (Ashley,Samantha).zip.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\lingerie catfight .avi.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\sperm hot (!) ¤ç .mpg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\Templates\hardcore [bangbus] mistress .rar.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\italian handjob beast catfight bondage .mpeg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\hardcore lesbian (Karin).avi.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\Microsoft Shared\gay licking ejaculation .rar.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\Temp\EU9470.tmp\american handjob gay big balls .avi.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Program Files\Common Files\microsoft shared\italian cum beast hidden blondie .mpg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft SQL Server\130\Shared\indian kicking bukkake big .mpeg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\PrintAndShare\swedish porn gay [milf] feet .mpeg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Temp\black fetish horse big .rar.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Update\Download\swedish action xxx [bangbus] 50+ (Jenna,Janette).zip.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\Download\fucking hidden feet .zip.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\Temp\lesbian several models .zip.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\fucking hot (!) (Karin).avi.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Program Files\dotnet\shared\hardcore [bangbus] cock sweet (Sylvia).avi.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\indian handjob bukkake girls titts young .avi.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft SQL Server\130\Shared\beast several models wifey .mpeg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\PLA\Templates\xxx catfight hole gorgeoushorny .mpg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_en-us_215194e2327a46ac\trambling uncut shoes .mpeg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\swedish cumshot fucking several models (Jade).rar.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.1_none_833abdc06c68d338\british gay uncut glans girly .mpg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\InputMethod\SHARED\fucking several models hole granny (Tatjana).zip.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\security\templates\danish porn bukkake [free] hole leather .mpg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.UI.ShellCommon\SharePickerUI\brasilian handjob horse catfight cock (Sonja,Karin).zip.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_de-de_7860bee9439c3ae7\japanese fetish blowjob [milf] titts .mpg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.867_en-us_49453482f1fb5356\american animal sperm [free] castration .avi.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_en-us_310bfb76047869ad\kicking bukkake licking .mpg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_it-it_bdb6c49fcea35732\cum sperm several models 50+ (Sonja,Curtney).mpg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.84_none_81616275259e37fe\norwegian xxx full movie (Sarah).zip.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\assembly\tmp\tyrkish porn gay public boots .rar.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.928_none_33e0d5558cdd7c61\trambling [milf] hole latex .zip.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_ee7ea14f7d8a3ee3\german gay [free] girly .avi.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-h..public-utils-shared_31bf3856ad364e35_10.0.19041.1_none_19d22204a1f3fcaf\chinese lesbian big gorgeoushorny .mpeg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor\danish porn blowjob public (Curtney).rar.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\inclusiveOobe\view\templates\italian beastiality lesbian [free] .avi.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_es-es_211cf1c632a13851\horse sleeping (Karin).rar.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5021dd18efc0460c\malaysia lingerie lesbian glans .zip.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ces-ime-eashared-lm_31bf3856ad364e35_10.0.19041.1_none_3d0229d17c310f10\french hardcore big hole 50+ .mpg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.1_none_2fe79eae2833b9b1\gang bang hardcore masturbation boots .rar.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..se-shared-datafiles_31bf3856ad364e35_10.0.19041.1_none_2f5f00d280dce9f6\bukkake big cock boots .mpg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-a..gement-uevtemplates_31bf3856ad364e35_10.0.19041.1_none_0d66b54875835a49\italian gang bang horse [bangbus] glans .mpeg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor.Resources\indian cum gay hot (!) feet hairy .mpeg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\swedish cum fucking licking pregnant .zip.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_c3d467c525734eb3\porn trambling sleeping traffic (Anniston,Karin).avi.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.789_en-us_58ebf9ecc407e3c0\italian gang bang horse sleeping latex .rar.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.746_none_1bbb9ab9fc52bac9\malaysia beast catfight hole traffic .avi.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..s-ime-eashared-ihds_31bf3856ad364e35_10.0.19041.1_none_e8996b7d3512363f\american handjob beast several models hole .zip.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_10.0.19041.572_none_cf90e12518baac85\beast catfight glans castration (Liz).mpg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\Downloads\black cum horse voyeur stockings .zip.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_de-de_881b257d159a5de8\xxx voyeur (Liz).avi.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.1_none_f3b35d713ce0fc7f\cum gay big (Jade).avi.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_10.0.19041.1_none_f07d4fae3e8e883f\french hardcore [free] titts 50+ .rar.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_es-es_bf79b5fcc06b3128\handjob horse catfight sweet .mpg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\templates\japanese gang bang gay masturbation feet (Ashley,Janette).zip.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_d38ece58f77171b4\asian sperm public glans sm .mpeg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.746_none_ab42fb092bda9182\norwegian xxx [milf] glans bedroom (Samantha).zip.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-service-shared_31bf3856ad364e35_10.0.19041.1_none_3cfd44d351b1a8ab\japanese animal trambling uncut hole .mpg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5fdc43acc1be690d\norwegian lingerie [milf] redhair (Gina,Sarah).zip.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost_31bf3856ad364e35_10.0.19041.1202_none_621728fcd3c9d5f6\bukkake hot (!) .zip.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-b..-bcdtemplate-client_31bf3856ad364e35_10.0.19041.1_none_de1581e9a275faf8\tyrkish porn beast big swallow .rar.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.867_none_c29826784f9429f8\german xxx licking feet shoes .avi.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-h..public-utils-shared_31bf3856ad364e35_10.0.19041.1202_none_d8a1416ab7cccdcf\animal xxx catfight glans young .rar.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Templates\danish horse trambling [milf] stockings .avi.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\chinese horse [free] young .zip.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.1_none_0bc0f3d4cd7dc8fd\black animal hardcore [bangbus] granny .rar.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_62312bfbb33d478a\fucking big .mpeg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\sperm uncut young .zip.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor\brasilian fetish hardcore hidden glans fishy .rar.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.ShellCommon.SharedResources\fucking big .rar.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.746_none_2212358fc33cc10f\fetish lesbian catfight cock .mpeg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-manager-shared_31bf3856ad364e35_10.0.19041.153_none_e23c926e32d07dc1\kicking gay lesbian cock (Kathrin,Karin).avi.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-service-shared_31bf3856ad364e35_10.0.19041.1151_none_fbdc4c5f677dc2ec\gang bang horse uncut hairy .zip.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\mssrv.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\japanese beastiality fucking public .mpg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Templates\tyrkish porn blowjob several models feet girly .rar.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-composable-sharepicker_31bf3856ad364e35_10.0.19041.1_none_c87e96327faffd0e\asian sperm uncut femdom .mpg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-ime-eashared-proxy_31bf3856ad364e35_10.0.19041.1_none_4c786ae2f508e6d5\malaysia bukkake [milf] .mpg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_it-it_4c5922428a6f2d08\horse gay [milf] feet stockings .rar.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-manager-shared_31bf3856ad364e35_10.0.19041.1266_none_7916f7558927ae23\black porn gay sleeping .mpeg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\italian handjob bukkake lesbian titts 40+ .zip.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe File created C:\Windows\assembly\temp\russian fetish horse [milf] (Curtney).mpg.exe dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 46 IoCs
pid Process 2732 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 2732 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 4664 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 4664 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 2732 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 2732 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 4884 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 4884 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 2680 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 2680 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 4664 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 4664 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 2732 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 2732 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 1048 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 1048 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 448 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 448 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 4664 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 4664 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 4536 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 4536 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 2732 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 2732 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 4964 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 4964 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 4884 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 4884 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 2680 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 2680 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 4436 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 4436 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 5024 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 5024 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 3556 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 3556 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 1048 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 1048 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 4664 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 4664 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 2732 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 2732 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 3980 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 3980 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 3208 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 3208 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 57 IoCs
description pid Process procid_target PID 2732 wrote to memory of 4664 2732 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 87 PID 2732 wrote to memory of 4664 2732 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 87 PID 2732 wrote to memory of 4664 2732 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 87 PID 4664 wrote to memory of 4884 4664 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 88 PID 4664 wrote to memory of 4884 4664 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 88 PID 4664 wrote to memory of 4884 4664 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 88 PID 2732 wrote to memory of 2680 2732 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 89 PID 2732 wrote to memory of 2680 2732 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 89 PID 2732 wrote to memory of 2680 2732 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 89 PID 4664 wrote to memory of 1048 4664 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 90 PID 4664 wrote to memory of 1048 4664 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 90 PID 4664 wrote to memory of 1048 4664 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 90 PID 2732 wrote to memory of 448 2732 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 91 PID 2732 wrote to memory of 448 2732 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 91 PID 2732 wrote to memory of 448 2732 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 91 PID 4884 wrote to memory of 4536 4884 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 92 PID 4884 wrote to memory of 4536 4884 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 92 PID 4884 wrote to memory of 4536 4884 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 92 PID 2680 wrote to memory of 4964 2680 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 93 PID 2680 wrote to memory of 4964 2680 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 93 PID 2680 wrote to memory of 4964 2680 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 93 PID 1048 wrote to memory of 4436 1048 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 96 PID 1048 wrote to memory of 4436 1048 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 96 PID 1048 wrote to memory of 4436 1048 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 96 PID 4664 wrote to memory of 5024 4664 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 97 PID 4664 wrote to memory of 5024 4664 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 97 PID 4664 wrote to memory of 5024 4664 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 97 PID 2732 wrote to memory of 3556 2732 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 98 PID 2732 wrote to memory of 3556 2732 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 98 PID 2732 wrote to memory of 3556 2732 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 98 PID 4884 wrote to memory of 3208 4884 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 99 PID 4884 wrote to memory of 3208 4884 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 99 PID 4884 wrote to memory of 3208 4884 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 99 PID 448 wrote to memory of 3980 448 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 100 PID 448 wrote to memory of 3980 448 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 100 PID 448 wrote to memory of 3980 448 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 100 PID 2680 wrote to memory of 2308 2680 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 101 PID 2680 wrote to memory of 2308 2680 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 101 PID 2680 wrote to memory of 2308 2680 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 101 PID 4536 wrote to memory of 3932 4536 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 102 PID 4536 wrote to memory of 3932 4536 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 102 PID 4536 wrote to memory of 3932 4536 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 102 PID 4964 wrote to memory of 2032 4964 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 103 PID 4964 wrote to memory of 2032 4964 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 103 PID 4964 wrote to memory of 2032 4964 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 103 PID 4436 wrote to memory of 1060 4436 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 106 PID 4436 wrote to memory of 1060 4436 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 106 PID 4436 wrote to memory of 1060 4436 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 106 PID 4664 wrote to memory of 4396 4664 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 107 PID 4664 wrote to memory of 4396 4664 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 107 PID 4664 wrote to memory of 4396 4664 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 107 PID 1048 wrote to memory of 4480 1048 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 108 PID 1048 wrote to memory of 4480 1048 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 108 PID 1048 wrote to memory of 4480 1048 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 108 PID 2732 wrote to memory of 3256 2732 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 109 PID 2732 wrote to memory of 3256 2732 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 109 PID 2732 wrote to memory of 3256 2732 dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe 109
Processes
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"1⤵
- Checks computer location settings
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2732 -
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4664 -
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4884 -
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4536 -
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:3932
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:1984
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:6528
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:9968
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"9⤵PID:25612
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:14776
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:21164
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:8128
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:17296
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:23412
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:9612
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:23884
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:15156
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:21252
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:6140
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:9684
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:19256
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:20404
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:14684
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:21084
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:7788
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:15292
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:22140
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:9952
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:19248
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:19664
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:15436
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:25760
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:2880
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:6212
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:9760
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:21232
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:14712
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:21100
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:8188
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:16632
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:22700
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:10668
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:1104
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:15796
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:22348
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:5884
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:8288
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:15272
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:22656
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:11048
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:18552
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:19048
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:2064
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:7228
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:7400
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:18560
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:19116
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:10176
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:15608
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:23868
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:15112
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:19416
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:20148
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:3208 -
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:1260
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:6348
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:10096
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:19432
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:20520
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:13356
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:18600
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:15696
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:7940
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:15064
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:21156
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:9596
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:19572
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:18484
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:15148
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:21268
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:5916
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:8820
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:16392
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:20808
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:13272
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:19592
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:27844
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:7612
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:14160
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:21060
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:9296
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:16680
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:19196
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:15812
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:22176
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:1220
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:6132
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:9636
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:16912
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:23760
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:13280
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:15680
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:19584
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:20336
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:7408
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:13372
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:18608
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:20632
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:1224
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:19752
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:27860
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:15420
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:21108
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:5616
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:9040
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:18528
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:19064
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:13876
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:20448
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:28540
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:5732
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:12216
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:22164
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:16772
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:23792
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:7868
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:19744
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:27836
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:14044
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:20536
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:28484
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1048 -
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4436 -
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:1060
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:5272
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:6692
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:9944
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"9⤵PID:23428
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:16168
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:19736
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:27820
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:8796
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:9888
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:9504
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:13628
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:18656
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:21300
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:6704
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:12140
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:20588
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:28516
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:17012
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:23768
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:8788
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:23400
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:13424
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:14596
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:20280
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:27804
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:5220
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:6624
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:11416
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:18816
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:11832
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:14392
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:21260
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:8720
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:19280
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:20472
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:12376
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:23852
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:18576
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:21176
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:6608
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:9552
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:23860
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:15120
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:19424
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:20500
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:8652
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:14824
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:21132
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:13460
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:18640
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:8564
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:4480
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:5576
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:7932
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:15476
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:9120
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:17168
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:21180
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:15104
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:19440
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:19632
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:7036
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:11980
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:19812
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:27852
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:18592
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:14260
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:9324
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:18784
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:18888
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:13264
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:19728
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:27828
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:5352
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:6512
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:11368
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:20604
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:28572
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:15232
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:7032
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:10088
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:16572
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:23736
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:14968
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:19976
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:27796
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:6808
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:2152
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:23784
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:15600
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:22320
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:8880
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:22208
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:13868
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:4940
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:20456
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:28500
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:5024 -
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:5044
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:6180
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:8588
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:18760
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:21444
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:12208
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:24208
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:15168
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:22708
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:7704
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:18080
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:7996
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:9576
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:19516
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:20984
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:15128
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:22684
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:5628
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:8308
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:18536
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:20856
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:10400
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:19468
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:20968
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:15524
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:22308
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:6248
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:13836
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:20556
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:27812
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:9644
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:19296
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:19948
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:14636
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:18992
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:19932
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:4396
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:5500
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:7336
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:16268
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:7652
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:9828
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:16564
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:9072
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:15048
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:19408
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:8508
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:6984
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:10704
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:19272
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:19864
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:15284
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:19524
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:18940
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:8904
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:19040
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:19684
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:13884
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:16036
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:20416
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:28548
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:5360
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:6388
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:13620
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:20424
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:28468
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:9332
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:18792
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:21484
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:12804
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:6712
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:15984
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:1692
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:6816
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:12200
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:19380
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:21476
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:15724
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:232
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:8888
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:18800
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:21376
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:12332
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:8068
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:14484
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:7152
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2680 -
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4964 -
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:2032
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:2636
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:6456
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:8692
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:19400
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"8⤵PID:19024
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:12672
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:16000
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:23776
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:8120
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:13940
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:20612
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:28556
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:9588
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:4280
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:20288
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:15140
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:21244
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:5900
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:8804
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:16588
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:23876
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:13732
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:20440
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:28524
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:7916
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:25772
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:9136
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:12680
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:15088
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:21076
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:1136
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:5188
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:8700
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:16936
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:23748
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:13764
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:16220
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:20620
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:28580
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:7528
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:13064
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:20400
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:9852
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:5172
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:20356
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:14736
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:19320
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:20816
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:5760
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:8388
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:16652
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:25812
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:10684
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:19800
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:27876
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:15788
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:21560
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:7096
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:12664
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:23844
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:19220
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:20988
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:9820
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:19240
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:20364
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:15024
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:19312
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:19880
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:2308
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:3028
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:6448
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:9268
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:21036
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:14600
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:19288
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:15324
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:8112
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:17344
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:25784
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:9572
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:13180
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:15316
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:21276
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:6240
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:9316
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:18768
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:21424
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:14140
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:20572
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:28492
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:8104
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:16556
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:22664
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:9604
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:18840
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:6868
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:14752
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:21116
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:1236
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:6220
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:8760
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:15616
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:22192
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:14028
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:20580
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:28476
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:7924
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:18824
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:20836
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:9304
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:18776
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:20880
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:15072
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:21092
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:5724
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:8660
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:19564
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:9620
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:11704
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:18624
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:21420
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:14616
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:20064
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:6392
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:15764
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:19988
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:9860
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:2668
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:14744
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:21124
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:448 -
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:3980 -
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:3324
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:6204
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:8728
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:2904
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:20332
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:13408
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"7⤵PID:2652
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:18616
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:20872
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:7908
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:15080
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:21140
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:10556
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:2848
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:20324
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:14864
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:23420
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:5948
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:8684
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:23800
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:12740
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:16056
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:16624
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:22692
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:7416
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:16580
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:22648
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:10408
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:18648
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:21316
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:14148
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:21068
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:4404
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:5696
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:8736
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:17304
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:23384
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:4848
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:26588
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:15780
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:19556
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:22404
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:7008
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:18092
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:15996
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:9784
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:18832
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:20896
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:14768
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:22200
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:5516
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:7252
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:14384
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:22156
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:9768
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:18808
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:21380
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:14692
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:19304
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:20516
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:6928
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:11584
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:20596
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:28564
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:16504
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:19548
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:18448
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:8896
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:18568
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:19504
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:13772
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:20432
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
PID:3556 -
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:516
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:5412
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:8572
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:14584
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:12384
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"6⤵PID:22892
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:16744
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:19004
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:7696
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:14816
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:21148
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:10604
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:18512
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:19764
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:13812
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:20408
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:28508
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:5684
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:8368
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:19264
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:20468
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:10676
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:1440
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:15772
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:2952
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:6916
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:14132
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:20564
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:28532
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:9776
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:14500
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:22184
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:14728
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:17176
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:19340
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"2⤵PID:3256
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:5416
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:5552
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:15744
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:19460
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:20936
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:7852
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:14248
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:21052
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:12976
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:17548
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:19448
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:18508
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:6876
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:11312
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"5⤵PID:14256
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:15988
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:22328
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:8864
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:16280
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:25548
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:13756
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:3868
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:21044
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"2⤵PID:5340
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:7132
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:13524
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:18632
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:24420
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:9028
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:15848
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:19532
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:18964
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:13892
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:18584
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:21172
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"2⤵PID:6776
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:12368
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"4⤵PID:25972
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:16148
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:22148
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"2⤵PID:8872
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:18544
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:19180
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"2⤵PID:12304
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"3⤵PID:23392
-
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"2⤵PID:16140
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"2⤵PID:19540
-
-
C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dac28b544a582c4ef948558f94baa2c0_NeikiAnalytics.exe"2⤵PID:21604
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\italian handjob beast catfight bondage .mpeg.exe
Filesize284KB
MD5d7adb3e6178ef968273e605ad168dfb4
SHA131b2f5b7b19bd578136c3eef56234e35b2fad321
SHA25696a8cc4a4a203d0057c639929f65ff6369b35e91a7dfa1354f6cde7e7c403323
SHA5121b7879a2419cf7f3daed0d2f279d162587a4410746800ce7d42d84f01f1e5478e3adef81cda71aa6d783dc9a3e0b4ee9e0731bbfb0c1c70af2fdbd50f3fbf89f