Analysis
-
max time kernel
27s -
max time network
151s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
16/05/2024, 12:05
Behavioral task
behavioral1
Sample
ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe
-
Size
1.5MB
-
MD5
ddcb7a59349e09c55fb7bba3ea549ec0
-
SHA1
0e281751b836ba4b210ceb300cfe34aa4f17d38c
-
SHA256
354647b737417689d3b5c2bc37f5a0c4ccfedb6f67ce233ce2be8b5c4276b948
-
SHA512
7d9467b7868622fcbb4259c2ed54cd4feed0f2c31f4a981318077cc8b22ad5d14d03cf2cff9b1fd24a643ab7b51542cb3adb0a83f03727467ae2ee932de154c2
-
SSDEEP
24576:VXqi1IGrup4HiOGEbYX5w3GuUE57V2SkRLTH3OubB8C1H40ABf1q7Zk7FsIYCATD:dqimkuaH3063GrE57V4tCudS0Ef1q7Zn
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
resource yara_rule behavioral1/memory/1724-0-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/files/0x000a0000000167d5-5.dat upx behavioral1/memory/2604-62-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2604-90-0x0000000004470000-0x000000000448E000-memory.dmp upx behavioral1/memory/2544-92-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1588-93-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1724-94-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2240-95-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2676-98-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2208-99-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1480-103-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2544-102-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2240-108-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1928-107-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1588-106-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/816-104-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2192-100-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2604-96-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2388-113-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2676-111-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1724-110-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/960-114-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2776-115-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1480-118-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/848-120-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2648-121-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2152-123-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2388-125-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/784-126-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1652-127-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/856-128-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2408-129-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/412-131-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1048-132-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/328-134-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1752-137-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1148-136-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2524-139-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1152-140-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1328-138-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/472-141-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2572-151-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2244-153-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2548-157-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2884-156-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2640-155-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2524-154-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1752-152-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2004-159-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2616-162-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/852-158-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2520-163-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2508-164-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2784-150-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2028-149-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2064-147-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/764-142-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2572-166-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2784-165-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2244-167-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2548-173-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/860-174-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2520-177-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2508-178-0x0000000000400000-0x000000000041E000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\K: ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File opened (read-only) \??\Q: ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File opened (read-only) \??\T: ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File opened (read-only) \??\Y: ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File opened (read-only) \??\B: ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File opened (read-only) \??\O: ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File opened (read-only) \??\W: ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File opened (read-only) \??\X: ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File opened (read-only) \??\L: ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File opened (read-only) \??\N: ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File opened (read-only) \??\P: ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File opened (read-only) \??\A: ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File opened (read-only) \??\G: ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File opened (read-only) \??\I: ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File opened (read-only) \??\J: ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File opened (read-only) \??\S: ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File opened (read-only) \??\U: ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File opened (read-only) \??\V: ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File opened (read-only) \??\Z: ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File opened (read-only) \??\E: ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File opened (read-only) \??\H: ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File opened (read-only) \??\M: ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File opened (read-only) \??\R: ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe -
Drops file in System32 directory 10 IoCs
description ioc Process File created C:\Windows\SysWOW64\FxsTmp\kicking blowjob hidden glans .rar.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\shared\swedish cum lingerie uncut gorgeoushorny (Sonja,Janette).mpeg.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\indian nude fucking masturbation shoes .rar.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\american kicking lesbian catfight gorgeoushorny .zip.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\horse public hole .avi.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\indian gang bang fucking big sm .avi.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\System32\DriverStore\Temp\hardcore girls titts bedroom .avi.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\System32\LogFiles\Fax\Incoming\lingerie uncut glans .rar.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\brasilian cumshot sperm public glans .zip.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\shared\danish porn beast hidden feet .rar.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe -
Drops file in Program Files directory 15 IoCs
description ioc Process File created C:\Program Files (x86)\Google\Update\Download\beast big (Samantha).rar.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\danish animal beast [bangbus] (Sarah).zip.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Office\Templates\danish animal horse [bangbus] stockings .rar.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\russian porn lesbian several models .zip.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Program Files\Windows Journal\Templates\tyrkish porn trambling licking high heels .mpeg.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\brasilian animal lingerie licking glans .mpeg.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\DocumentShare\tyrkish handjob hardcore public .rar.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Program Files\Common Files\Microsoft Shared\xxx licking (Tatjana).avi.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\IDTemplates\japanese kicking fucking [free] bondage .mpg.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\microsoft shared\american horse beast catfight feet .rar.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Temp\italian horse xxx catfight (Liz).rar.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Notebook Templates\indian kicking gay licking hole 40+ .mpg.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Shared\horse girls hole bedroom .mpg.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\XML Files\Space Templates\brasilian animal hardcore hidden titts .zip.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\tyrkish kicking bukkake masturbation glans leather .mpg.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\winsxs\x86_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_ddab3bcb3a4ffb45\bukkake lesbian bedroom .mpeg.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft.grouppolicy.admtmpleditor_31bf3856ad364e35_6.1.7601.17514_none_dd18b2a07d49aa11\french blowjob lesbian titts blondie .mpg.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_netfx-shared_registry_whidbey_31bf3856ad364e35_6.1.7600.16385_none_664dbffec8693dfe\lesbian uncut titts .mpeg.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_0835101f2d90c7b6\fetish lesbian sleeping .avi.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_2e7f079c3208e549\horse lesbian uncut cock high heels .mpeg.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_6.1.7601.17514_none_3c93ac15fd731acf\fetish hardcore sleeping cock .mpg.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_3863e9ef3f804dd9\asian lesbian public titts .zip.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_6.1.7600.16385_en-us_00f45b041e1e8fd3\canadian fucking hot (!) sm .mpeg.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_6.1.7600.16385_none_99b74194b7347cab\trambling hidden glans (Christine,Samantha).mpg.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_6.1.7600.16385_de-de_5803850b2f40840e\russian cumshot blowjob hidden swallow (Sandy,Curtney).zip.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_netfx-shared_netfx_20_perfcounter_31bf3856ad364e35_6.1.7600.16385_none_a945e2c500c90142\nude xxx hidden cock .mpeg.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\Temp\italian cum lesbian hidden .rar.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_bacc7ceffc55dca2\canadian lingerie hidden glans bondage (Jade).avi.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_39c9d74ef2ad6c7b\tyrkish beastiality bukkake big .mpeg.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\Downloaded Program Files\trambling big glans balls .mpg.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\security\templates\italian gang bang xxx hidden sweet .mpeg.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Templates\beast [free] .zip.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\Downloads\blowjob girls glans .avi.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_ad7c61fb28607522\japanese nude xxx several models .zip.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-systempropertiesremote_31bf3856ad364e35_6.1.7600.16385_none_f0ca3430257ea13f\gang bang xxx voyeur granny .avi.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_netfx-shared_netfx_20_mscorwks_31bf3856ad364e35_6.1.7600.16385_none_dba3691c6002e10e\sperm [bangbus] (Tatjana).mpeg.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_netfx-shared_netfx_20_mscorlib_b03f5f7f11d50a3a_6.1.7600.16385_none_2958d4a31d2ec64f\handjob lingerie licking glans mature (Jade).avi.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\mssrv.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\Framework\v4.0.30319\Temporary ASP.NET Files\hardcore [free] hole boots .rar.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_en-us_aedaf3947d09fbe5\horse gay [milf] glans .mpg.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\Downloads\horse hidden .zip.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-ime-eashared-ccshared_31bf3856ad364e35_6.1.7601.17514_none_d8216ed3d8746200\danish fetish horse [milf] titts .zip.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\assembly\temp\lingerie sleeping .mpeg.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_de-de_60a2cbbf935c42b4\swedish handjob blowjob uncut feet bondage .mpg.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor\indian action beast hidden .zip.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\assembly\GAC_MSIL\Microsoft.SharePoint.BusinessData.Administration.Client.Intl\brasilian kicking bukkake voyeur .rar.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_6.1.7600.16385_none_cd2006602e5ee22e\lesbian licking titts sm (Sarah).mpeg.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-sx-shared_31bf3856ad364e35_6.1.7600.16385_none_387a16fe7addf3b6\spanish bukkake masturbation .avi.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-p2p-pnrp-adm_31bf3856ad364e35_6.1.7600.16385_none_5499606faffb3f9f\canadian fucking hidden cock .rar.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sharedfoldersui_31bf3856ad364e35_6.1.7600.16385_none_1412267f4b3bb985\malaysia sperm girls black hairunshaved .rar.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-sharedfoldersui_31bf3856ad364e35_6.1.7600.16385_none_b7f38afb92de484f\brasilian cum lingerie hot (!) .rar.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sx-shared_31bf3856ad364e35_6.1.7600.16385_none_9498b282333b64ec\danish fetish hardcore several models .mpg.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-m..-temptable-provider_31bf3856ad364e35_6.1.7600.16385_none_1dd3ce8d1e7524cd\gay catfight hotel .avi.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_netfx-shared_registry_whidbey_31bf3856ad364e35_6.1.7600.16385_none_c26c5b8280c6af34\trambling voyeur cock high heels .rar.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\InstallTemp\horse sperm voyeur redhair (Jenna,Karin).zip.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-h..-hmeshare.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_8c6fc5a7aa8c435d\african xxx [free] feet high heels (Janette).mpeg.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_it-it_97a45841ff925aa0\german trambling licking circumcision .rar.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\wow64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.1.7601.17514_none_79642285ffd2a388\canadian beast [bangbus] titts swallow (Melissa).mpg.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_it-it_f25d066604c2ad34\nude fucking uncut cock .avi.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-nfs-shared_31bf3856ad364e35_6.1.7600.16385_none_6377027f0030a06a\animal beast hidden blondie .mpeg.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_netfx-aspnet_installsqlstatetemp_b03f5f7f11d50a3a_6.1.7600.16385_none_16a2bb1dbab1c595\kicking blowjob uncut glans .avi.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_de-de_05ea1d9b8e2bf020\brasilian cum gay public (Jade).zip.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\italian gang bang xxx licking glans .mpg.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\lesbian voyeur glans leather .mpeg.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_515dc677700303ec\italian animal lingerie [free] hole .avi.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_netfx-shared_netfx_20_mscorwks_31bf3856ad364e35_6.1.7600.16385_none_7f84cd98a7a56fd8\norwegian trambling uncut beautyfull .rar.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_en-us_65b23d3c3a97bfaf\gay [free] cock (Sonja,Janette).mpeg.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_6.1.7600.16385_de-de_e30b5ec05031d17d\russian fetish trambling licking cock .avi.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_6.1.7601.17514_none_d81c96999f75bd77\beastiality lesbian several models latex .avi.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-p..al-securitytemplate_31bf3856ad364e35_6.1.7600.16385_none_49dd84a06c7c8863\american porn xxx hot (!) feet .mpeg.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_a3772de7111797da\russian horse bukkake big cock balls (Curtney).avi.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_6.1.7600.16385_it-it_8d9f242de8497d58\asian sperm masturbation feet beautyfull .zip.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-d..-ime-eashared-proxy_31bf3856ad364e35_6.1.7600.16385_none_965db382b6fef5cb\horse big young .mpg.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_netfx-shared_netfx_20_perfcounter_31bf3856ad364e35_6.1.7600.16385_none_4d274741486b900c\tyrkish action gay [free] titts .avi.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\danish horse horse sleeping .mpg.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_6.1.7600.16385_none_293ea1e3e6bc5364\trambling hidden ejaculation .mpeg.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-h..-hmeshare.resources_31bf3856ad364e35_6.1.7600.16385_de-de_b4aea777fe683838\horse trambling uncut glans .zip.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_2fc4a33adb648f33\nude blowjob masturbation .avi.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe File created C:\Windows\winsxs\wow64_microsoft-windows-sharedaccess_31bf3856ad364e35_6.1.7600.16385_none_6b16fa9f975e1109\asian xxx hot (!) pregnant .mpeg.exe ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 1724 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 2604 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 1724 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 2208 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 2192 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 2604 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 1724 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 2544 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 816 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 1588 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 2208 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 2604 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 1928 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 2192 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 1724 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 2240 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 2676 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 2544 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 960 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 2776 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 816 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 1480 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 2208 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 1588 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 2648 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 848 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 2604 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 2152 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 2192 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 1928 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 1724 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 2388 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 784 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 2240 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 1652 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 856 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 2676 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 2408 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 2544 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 412 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 2776 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 816 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 960 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 960 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 1048 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 1048 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 2208 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 2208 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 328 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 328 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 1148 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 1148 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 1152 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 1152 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 1328 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 1328 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 1588 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 1588 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 472 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 472 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 2604 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 2604 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 764 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 764 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 1724 wrote to memory of 2604 1724 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 28 PID 1724 wrote to memory of 2604 1724 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 28 PID 1724 wrote to memory of 2604 1724 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 28 PID 1724 wrote to memory of 2604 1724 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 28 PID 2604 wrote to memory of 2208 2604 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 29 PID 2604 wrote to memory of 2208 2604 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 29 PID 2604 wrote to memory of 2208 2604 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 29 PID 2604 wrote to memory of 2208 2604 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 29 PID 1724 wrote to memory of 2192 1724 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 30 PID 1724 wrote to memory of 2192 1724 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 30 PID 1724 wrote to memory of 2192 1724 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 30 PID 1724 wrote to memory of 2192 1724 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 30 PID 2208 wrote to memory of 2544 2208 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 31 PID 2208 wrote to memory of 2544 2208 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 31 PID 2208 wrote to memory of 2544 2208 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 31 PID 2208 wrote to memory of 2544 2208 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 31 PID 2604 wrote to memory of 816 2604 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 32 PID 2604 wrote to memory of 816 2604 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 32 PID 2604 wrote to memory of 816 2604 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 32 PID 2604 wrote to memory of 816 2604 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 32 PID 2192 wrote to memory of 1588 2192 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 33 PID 2192 wrote to memory of 1588 2192 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 33 PID 2192 wrote to memory of 1588 2192 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 33 PID 2192 wrote to memory of 1588 2192 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 33 PID 1724 wrote to memory of 1928 1724 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 34 PID 1724 wrote to memory of 1928 1724 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 34 PID 1724 wrote to memory of 1928 1724 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 34 PID 1724 wrote to memory of 1928 1724 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 34 PID 2544 wrote to memory of 2240 2544 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 35 PID 2544 wrote to memory of 2240 2544 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 35 PID 2544 wrote to memory of 2240 2544 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 35 PID 2544 wrote to memory of 2240 2544 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 35 PID 816 wrote to memory of 2676 816 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 36 PID 816 wrote to memory of 2676 816 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 36 PID 816 wrote to memory of 2676 816 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 36 PID 816 wrote to memory of 2676 816 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 36 PID 2208 wrote to memory of 960 2208 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 37 PID 2208 wrote to memory of 960 2208 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 37 PID 2208 wrote to memory of 960 2208 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 37 PID 2208 wrote to memory of 960 2208 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 37 PID 1588 wrote to memory of 2776 1588 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 38 PID 1588 wrote to memory of 2776 1588 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 38 PID 1588 wrote to memory of 2776 1588 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 38 PID 1588 wrote to memory of 2776 1588 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 38 PID 2604 wrote to memory of 1480 2604 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 39 PID 2604 wrote to memory of 1480 2604 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 39 PID 2604 wrote to memory of 1480 2604 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 39 PID 2604 wrote to memory of 1480 2604 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 39 PID 2192 wrote to memory of 848 2192 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 40 PID 2192 wrote to memory of 848 2192 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 40 PID 2192 wrote to memory of 848 2192 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 40 PID 2192 wrote to memory of 848 2192 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 40 PID 1928 wrote to memory of 2648 1928 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 41 PID 1928 wrote to memory of 2648 1928 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 41 PID 1928 wrote to memory of 2648 1928 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 41 PID 1928 wrote to memory of 2648 1928 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 41 PID 1724 wrote to memory of 2152 1724 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 42 PID 1724 wrote to memory of 2152 1724 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 42 PID 1724 wrote to memory of 2152 1724 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 42 PID 1724 wrote to memory of 2152 1724 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 42 PID 2240 wrote to memory of 2388 2240 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 43 PID 2240 wrote to memory of 2388 2240 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 43 PID 2240 wrote to memory of 2388 2240 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 43 PID 2240 wrote to memory of 2388 2240 ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe 43
Processes
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"1⤵
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1724 -
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2604 -
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2208 -
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2544 -
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2240 -
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵
- Suspicious behavior: EnumeratesProcesses
PID:2388 -
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:1752
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:3372
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"9⤵PID:5512
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"10⤵PID:10576
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"11⤵PID:3496
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"10⤵PID:21512
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"9⤵PID:8352
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"10⤵PID:22324
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"9⤵PID:15456
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:4856
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"9⤵PID:8680
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"10⤵PID:4784
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"9⤵PID:15572
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:6812
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"9⤵PID:18556
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:11020
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"9⤵PID:23980
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:4624
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:3452
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:5564
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"9⤵PID:11028
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"10⤵PID:3276
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"9⤵PID:5008
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:8376
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"9⤵PID:19924
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:15604
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:4880
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:8920
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"9⤵PID:22124
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:19916
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:7028
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:17676
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:12600
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:24232
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:2884
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:3500
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:5612
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"9⤵PID:11292
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"10⤵PID:22912
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"9⤵PID:22308
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:8552
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"9⤵PID:20900
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:19864
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:4912
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:8728
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"9⤵PID:21228
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:15508
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:7040
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:2532
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:11832
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:24012
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:22864
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:3528
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:5748
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:11552
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"9⤵PID:3208
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:23156
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:8912
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:22956
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:20020
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:5072
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:9160
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:21196
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:14076
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:6736
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:21084
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:12716
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:24208
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
PID:1652 -
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:852
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:3548
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:5884
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"9⤵PID:12688
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"9⤵PID:24200
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:8988
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"9⤵PID:21260
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:1980
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:4788
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:9148
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"9⤵PID:21316
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:15148
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:7264
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:21180
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:10268
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:22148
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:15652
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:3596
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:6116
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:14000
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:23956
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:9308
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:21100
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:14224
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:4416
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:9748
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:21920
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:19268
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:7716
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:19596
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:14248
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:2584
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:4052
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:6560
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:19540
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:11736
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:19684
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:5992
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:14136
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:9012
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:18236
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:19612
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:3648
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:5828
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:12044
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:19500
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:8488
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:22204
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:18220
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:5176
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:10232
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:23148
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:15788
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:7744
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:21076
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:14084
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:960 -
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
PID:856 -
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:2004
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:3820
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:6500
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"9⤵PID:15708
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:10348
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"9⤵PID:24028
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:15756
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:5380
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:10936
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:22436
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:8284
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:21132
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:15516
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:3568
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:5924
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:13976
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:8632
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:22856
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:15528
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:4892
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:9344
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:23124
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:12316
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:22476
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:7392
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:17724
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:10276
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:23164
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:15748
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:2444
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:4004
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:7608
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:21156
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:14016
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:5640
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:12292
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:22500
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:9756
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:22172
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:19940
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:3760
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:6460
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:17668
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:10372
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:24036
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:15588
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:5356
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:10560
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:22180
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:7196
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:22340
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:11068
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:23108
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:4736
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:1048 -
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:2520
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:892
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:7856
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:22348
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:12308
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:22492
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:5724
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:14240
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:9764
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:4252
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:19980
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:3836
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:6856
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:15436
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:10788
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:22444
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:5436
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:10568
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:23092
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:21912
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:8300
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:21356
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:15540
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:2616
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:3772
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:7636
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:17700
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:11536
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:23964
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:22508
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:5548
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:14180
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:9728
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:23068
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:14212
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:3752
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:6188
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:14804
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:8704
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:21332
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:19644
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:5332
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:10796
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:22540
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:20736
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:8096
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:19476
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:14368
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:816 -
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:2676 -
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
PID:784 -
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:2524
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:3416
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:5540
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"9⤵PID:11280
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"9⤵PID:19548
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:8496
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"9⤵PID:21292
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:15888
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:4872
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:9096
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"9⤵PID:22228
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:20012
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:6804
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:15700
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:11012
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:23100
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:22300
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:3464
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:5596
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:11148
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"9⤵PID:23188
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:22460
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:8576
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:1548
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:15896
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:4896
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:9180
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:18252
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:18748
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:7052
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:19652
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:11724
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:2608
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:1656
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:2244
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:3952
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:6892
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:18228
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:11044
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:3264
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:2440
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:5684
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:12028
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:19556
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:9040
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:19516
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:19604
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:3592
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:6084
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:13944
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:8972
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:22888
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:20996
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:4440
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:10244
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:15812
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:7644
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:22244
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:11520
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:23924
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:22524
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:412 -
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:2572
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:3976
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:7160
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:20848
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:11660
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:22904
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:22468
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:5732
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:13992
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:8544
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:2808
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:15044
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:3616
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:6140
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:11308
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:22096
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:21252
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:10388
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:1532
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:15328
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:4868
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:9740
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:22896
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:19988
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:7680
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:21212
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:11528
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:2236
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:2640
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:3628
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:7664
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:19660
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:14256
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:5308
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:12300
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:956
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:8272
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:21172
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:20816
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:3728
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:6068
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:11256
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:20824
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:10396
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:23116
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:15660
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:5280
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:10456
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:22624
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:21244
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:8044
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:18952
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:14044
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:1480 -
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:472 -
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:1880
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:4848
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:9080
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:18260
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:14068
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:6996
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:19484
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:11824
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:5880
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:3388
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:7240
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:13644
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:10252
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:24044
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:15772
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:6020
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:13668
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:9004
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:22332
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:19628
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:3084
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:4944
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:9188
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:21308
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:20724
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:7016
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:22276
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:12728
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:24224
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:4208
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:8180
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:21536
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:14028
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:5892
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:10216
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:3368
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:15580
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:9284
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:22380
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:21004
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:1148 -
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:3060
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:4468
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:8412
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:22236
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:15796
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:6512
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:17684
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:10804
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:1760
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:3912
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:6772
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:19740
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:10920
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:23948
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:4688
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:5624
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:11156
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:23996
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:2456
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:8568
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:21284
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:21028
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"3⤵PID:860
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:4612
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:8692
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:22364
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:15804
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:6716
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:15692
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:10976
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:22132
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:22420
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"3⤵PID:1888
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:7012
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:15716
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:11792
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:3460
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"3⤵PID:5968
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:14052
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"3⤵PID:8980
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:4204
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"3⤵PID:19620
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2192 -
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1588 -
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:2776 -
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
PID:2408 -
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:2784
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:3944
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:6956
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"9⤵PID:19932
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:11668
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:21896
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:5676
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:11300
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"9⤵PID:4520
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:21936
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:8536
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:21276
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:19896
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:3660
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:5900
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:10412
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"9⤵PID:22164
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:20832
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:10404
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:3960
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:15500
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:5192
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:10364
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:5044
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:15596
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:7816
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:22372
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:14092
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:2548
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:4016
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:7104
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:22252
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:11356
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:22552
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:20840
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:5848
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:12012
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:19492
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:8904
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:3624
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:19636
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:3684
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:5916
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:12036
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:23988
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:19588
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:10068
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:23076
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:19708
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:5208
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:10092
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:23940
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:15764
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:8032
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:21472
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:14812
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:328 -
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:2508
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:4256
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:7792
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:22316
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:10952
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:22516
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:6400
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:17692
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:10632
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:19564
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:3828
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:6532
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:15684
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:10584
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:21528
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:5464
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:10928
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:23084
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:22404
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:8312
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:21140
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:15428
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:1568
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:4524
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:8524
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:21188
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:15880
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:6696
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:15668
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:10992
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:22156
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:22428
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:4028
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:7140
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:11600
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:22532
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:12496
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:5960
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:12020
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:23972
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:19700
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:8608
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:21092
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:21012
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:848 -
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:2064
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:3284
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:4548
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:9332
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:21300
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:14060
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:7248
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:14944
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:10260
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:22196
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:15780
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:4288
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:7660
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:21340
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:10960
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:22140
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:2016
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:6440
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:13660
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:10544
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:22848
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:2540
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:3124
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:5000
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:9224
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:21204
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:14152
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:6792
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:17732
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:12508
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:24192
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:4216
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:7976
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:21380
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:15028
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:6156
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:15168
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:9300
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:21372
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:12488
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:22484
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:1328 -
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:2120
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:4500
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:8396
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:23932
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:15724
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:6540
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:17716
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:10552
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:21928
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:4068
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:6284
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:19468
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:12764
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:24216
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:5984
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:11592
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:24004
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:21500
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:9020
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:21268
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:2888
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"3⤵PID:2012
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:4740
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:9088
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:21364
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:19260
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:6820
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:18276
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:10984
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:22452
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"3⤵PID:2968
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:7256
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:13936
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:24168
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:11804
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:3812
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:916
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"3⤵PID:6028
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:13984
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"3⤵PID:9032
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:18268
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"3⤵PID:1964
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1928 -
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:2648 -
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:1076
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:3200
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:4236
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:9720
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"8⤵PID:21636
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:14160
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:7208
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:17044
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:11712
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:5768
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:4280
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:7220
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:22268
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:11004
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:22188
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:6368
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:10084
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:5556
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:19996
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:10640
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:22872
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:19692
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:3136
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:5048
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:9128
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:22284
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:15156
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:6832
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:22220
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:11744
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:3964
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:22412
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:4224
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:7736
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:21116
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:10968
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:21164
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:5980
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:10004
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:23180
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:19724
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:9292
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:23132
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:19852
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:1152 -
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:1912
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:4584
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:8420
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:1216
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:15344
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:6704
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:19748
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:11036
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:21148
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:3380
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:3996
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:6920
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:19716
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:11052
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:24108
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:5520
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:5716
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:11544
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:22948
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:8560
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:21124
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:20860
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"3⤵PID:1696
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:4672
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:9212
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:18244
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:19448
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:6728
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:19508
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:11060
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:22920
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:22292
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"3⤵PID:3424
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:7304
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:21108
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:10380
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:23172
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:15368
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"3⤵PID:6008
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:11584
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:2052
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"3⤵PID:8996
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:19460
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"3⤵PID:19824
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
PID:2152 -
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"3⤵PID:2028
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:3256
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:4300
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:9788
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"7⤵PID:4060
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:15140
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:7180
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:14824
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:13364
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:4304
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:8076
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:21432
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:15116
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:6384
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:17708
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:10624
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:2472
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:19668
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"3⤵PID:3164
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:5092
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:9104
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:22356
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:21044
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:7188
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:13652
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:13952
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"3⤵PID:4240
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:7948
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:21520
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:15176
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"3⤵PID:6376
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:10076
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:22880
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:19872
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"3⤵PID:10616
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:23140
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"3⤵PID:19676
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
PID:764 -
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"3⤵PID:1584
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:4692
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:9120
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"6⤵PID:21220
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:19732
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:6744
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:15676
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:11076
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:21324
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:4940
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"3⤵PID:3312
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:6448
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:21544
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:12772
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"3⤵PID:5944
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:10592
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:22116
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:21236
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"3⤵PID:8600
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:21348
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"3⤵PID:19880
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"2⤵PID:3092
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"3⤵PID:4972
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:8928
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"5⤵PID:4496
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:19908
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"3⤵PID:7144
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:19580
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"3⤵PID:11676
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:22108
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"3⤵PID:19572
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"2⤵PID:4192
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"3⤵PID:7832
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:22212
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"3⤵PID:14108
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"2⤵PID:5204
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"3⤵PID:10012
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"4⤵PID:24020
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"3⤵PID:18212
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"2⤵PID:8296
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"3⤵PID:22260
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ddcb7a59349e09c55fb7bba3ea549ec0_NeikiAnalytics.exe"2⤵PID:21036
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.9MB
MD5f6ae7b79e6498ef389437e4ef9aaebc9
SHA1fe5395603751b6156b4507b5f0e574d9b97d59b3
SHA256c0d42434173c8beef4d904ba86aca01f00c246f42fdbbaccc197ed9c8f0574da
SHA51212c264d82f01b4d4847a7123c3fd943ac3262297bc24d4f1b195cd440259061f0c7b1221a14dd212a9cf2fe9cf43e671f0df200d162ee378a670a568aa8158db
-
Filesize
183B
MD5ffa9376f622e80c75f84dc8b6d7e9860
SHA1a23269ac50b69300eb2dba90257b0bb67128c974
SHA256dc54a8676803b6b528f71456117a73ff99ee7c02136eae5a10fb14f58eedfd76
SHA512fd20f615361b8db287ed6f52f0a0fa904f5b77cbcf2639e1175f7adf588246c4187130843c8bc670d22615c3dc2b1ed1e416ea2aaa371e87b914a52536f4ae4a