Analysis
-
max time kernel
22s -
max time network
147s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
16-05-2024 13:02
Behavioral task
behavioral1
Sample
dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe
-
Size
1.1MB
-
MD5
dfb14938ced66474d65a99d03caf3d20
-
SHA1
30b205256208bef1fbda4a98ac9a3c9b8b1889dd
-
SHA256
d564076cc38a895ff9a94a0a8e4b3816bd8ee94092e1ded5603b5f091ab4c0cd
-
SHA512
6544b9a97dcf847a36abce8f9c6aede4b9d48697a119a1064779ddd00792cf4321db65b1ac01bc11380b81447936eb964036838aff9f8082d1fb70cf513c4f21
-
SSDEEP
24576:Vry8fStKGc2ppYnQLYUlYc7lD7O6n4Uz9kGUdAYe5Elt0ZKK8Um:hz2B7JYBcZeOmSYesJrr
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
resource yara_rule behavioral1/memory/1368-0-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/files/0x0007000000015cb8-5.dat upx behavioral1/memory/2292-66-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1072-91-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2820-93-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2896-95-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/3020-96-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/688-97-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1676-98-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2768-100-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1368-101-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1952-105-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2820-110-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1072-107-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2896-113-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2840-109-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2292-104-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1152-117-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2056-120-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2768-119-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1676-116-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/688-115-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/3020-114-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1584-112-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2840-125-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1952-124-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1368-123-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1056-127-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1584-128-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1484-129-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1396-131-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2388-134-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1516-133-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1152-132-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2056-136-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2308-137-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2068-139-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/380-141-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1056-142-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1620-144-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1484-145-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1396-146-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2388-147-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2264-150-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2308-149-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1648-151-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1824-153-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1612-155-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1704-156-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1388-161-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1392-159-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1656-157-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2744-164-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2676-165-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2664-163-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2288-162-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2424-166-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2460-167-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/612-169-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1388-170-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2664-171-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2744-172-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2676-173-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2968-174-0x0000000000400000-0x000000000041E000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\U: dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File opened (read-only) \??\X: dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File opened (read-only) \??\A: dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File opened (read-only) \??\T: dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File opened (read-only) \??\J: dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File opened (read-only) \??\K: dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File opened (read-only) \??\M: dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File opened (read-only) \??\N: dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File opened (read-only) \??\V: dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File opened (read-only) \??\Y: dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File opened (read-only) \??\B: dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File opened (read-only) \??\H: dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File opened (read-only) \??\Z: dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File opened (read-only) \??\L: dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File opened (read-only) \??\O: dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File opened (read-only) \??\Q: dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File opened (read-only) \??\R: dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File opened (read-only) \??\S: dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File opened (read-only) \??\W: dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File opened (read-only) \??\E: dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File opened (read-only) \??\I: dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File opened (read-only) \??\G: dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File opened (read-only) \??\P: dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe -
Drops file in System32 directory 10 IoCs
description ioc Process File created C:\Windows\SysWOW64\config\systemprofile\danish beastiality blowjob catfight glans beautyfull .mpeg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\shared\black porn xxx licking glans pregnant (Karin).rar.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\System32\LogFiles\Fax\Incoming\brasilian cum lesbian catfight .avi.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\black beastiality xxx several models young .zip.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\lingerie sleeping feet traffic .rar.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\italian fetish blowjob voyeur hole .mpg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\trambling catfight boots .zip.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\System32\DriverStore\Temp\fucking [bangbus] .zip.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\spanish gay [milf] glans young .zip.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\shared\sperm hidden .rar.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe -
Drops file in Program Files directory 15 IoCs
description ioc Process File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\american cumshot hardcore [free] cock castration .mpg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Program Files\Common Files\Microsoft Shared\swedish action bukkake big .zip.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\IDTemplates\american action blowjob girls (Jade).mpg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\XML Files\Space Templates\russian porn fucking public sm .mpg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Notebook Templates\sperm public titts upskirt (Karin).rar.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\brasilian porn gay hot (!) feet .zip.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\horse licking feet .avi.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Program Files\Windows Journal\Templates\xxx [milf] .zip.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\microsoft shared\xxx several models glans swallow .mpg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Temp\american gang bang fucking catfight feet .mpeg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\DocumentShare\black horse fucking lesbian gorgeoushorny .mpeg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Office\Templates\lesbian sleeping shoes .mpg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Shared\black handjob lingerie licking shower (Gina,Janette).mpeg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\american beastiality lesbian [free] (Melissa).mpeg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Update\Download\japanese animal hardcore catfight fishy .rar.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\winsxs\amd64_microsoft-windows-sx-shared_31bf3856ad364e35_6.1.7600.16385_none_9498b282333b64ec\british fucking [bangbus] .mpeg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\security\templates\trambling licking titts .rar.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\japanese nude sperm uncut titts .mpeg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_6.1.7600.16385_none_99b74194b7347cab\spanish lingerie girls cock high heels (Tatjana).mpeg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_bacc7ceffc55dca2\action horse big feet .mpg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-systempropertiesremote_31bf3856ad364e35_6.1.7600.16385_none_f0ca3430257ea13f\canadian lingerie full movie boots .mpeg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP6B8E.tmp\british xxx public hole .avi.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-nfs-shared_31bf3856ad364e35_6.1.7600.16385_none_6377027f0030a06a\danish porn gay big leather .mpeg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_6.1.7600.16385_it-it_18a6fde3093acac7\norwegian bukkake girls glans ìï .avi.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_it-it_97a45841ff925aa0\asian lesbian [milf] 40+ (Britney,Samantha).mpeg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sharedaccess_31bf3856ad364e35_6.1.7600.16385_none_60c2504d62fd4f0e\kicking lesbian big YEâPSè& .avi.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft.grouppolicy.admtmpleditor_31bf3856ad364e35_6.1.7601.17514_none_39374e2435a71b47\lingerie lesbian feet stockings .mpeg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9E41.tmp\bukkake full movie titts .avi.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\assembly\temp\bukkake lesbian pregnant .avi.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_6.1.7600.16385_es-es_8bc7919d3f36cee7\cum fucking masturbation young .avi.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\indian beastiality lesbian public feet blondie .zip.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-h..-hmeshare.resources_31bf3856ad364e35_6.1.7600.16385_it-it_ea4a469ab7713182\danish nude lesbian hidden sm .zip.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_6.1.7600.16385_en-us_00f45b041e1e8fd3\canadian trambling voyeur sm .mpeg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_en-us_0af98f1835676d1b\italian fetish bukkake girls stockings .rar.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\assembly\GAC_32\Microsoft.SharePoint.BusinessData.Administration.Client\italian beastiality blowjob [bangbus] .rar.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor.Resources\italian porn lesbian [milf] (Curtney).avi.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\lingerie full movie traffic .avi.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-h..-hmeshare.resources_31bf3856ad364e35_6.1.7600.16385_de-de_b4aea777fe683838\british xxx licking (Sylvia).mpg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_2fc4a33adb648f33\trambling big ìï .avi.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_netfx-shared_registry_whidbey_31bf3856ad364e35_6.1.7600.16385_none_c26c5b8280c6af34\chinese horse [free] femdom (Christine,Karin).rar.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE291.tmp\sperm hot (!) beautyfull .zip.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\fucking sleeping girly .avi.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_it-it_f25d066604c2ad34\malaysia bukkake masturbation hotel .mpg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\winsxs\InstallTemp\african fucking hot (!) titts .rar.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-b..-bcdtemplate-client_31bf3856ad364e35_6.1.7600.16385_none_8419660d1cc97b24\black fetish sperm big titts shower (Sylvia).rar.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_8bfc34b93f0fdd42\malaysia trambling [milf] .rar.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_netfx-shared_netfx_20_perfcounter_31bf3856ad364e35_6.1.7600.16385_none_a945e2c500c90142\handjob beast licking titts beautyfull .avi.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_6.1.7601.17514_none_98b24799b5d08c05\german blowjob licking .avi.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_39c9d74ef2ad6c7b\french xxx [milf] feet pregnant .rar.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\sperm uncut sweet .rar.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_de-de_bcc167434bb9b3ea\lingerie masturbation hotel .mpg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_6.1.7600.16385_de-de_5803850b2f40840e\horse bukkake several models hairy (Sonja,Sarah).rar.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_6.1.7600.16385_es-es_00bfb7e81e458178\lesbian several models girly .avi.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-p2p-pnrp-adm_31bf3856ad364e35_6.1.7600.16385_none_5499606faffb3f9f\lesbian catfight .mpeg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\mssrv.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\Framework\v4.0.30319\Temporary ASP.NET Files\xxx catfight (Samantha).rar.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Templates\swedish nude fucking several models hole (Kathrin,Liz).rar.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_es-es_0ac4ebfc358e5ec0\danish beastiality gay girls latex (Britney,Samantha).zip.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_ad7c61fb28607522\cumshot blowjob sleeping (Tatjana).avi.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sharedfoldersui_31bf3856ad364e35_6.1.7600.16385_none_1412267f4b3bb985\trambling [milf] (Curtney).avi.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_a3772de7111797da\japanese horse lingerie [bangbus] shower .zip.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_6.1.7600.16385_it-it_8d9f242de8497d58\bukkake [bangbus] hole .rar.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-vsssystemprovider_31bf3856ad364e35_6.1.7600.16385_none_a727eb798dcfb185\black cumshot trambling catfight cock .avi.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\assembly\tmp\bukkake big feet hotel (Janette).mpeg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_6.1.7600.16385_none_293ea1e3e6bc5364\british horse several models mistress (Gina,Jade).mpg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_6.1.7601.17514_none_d81c96999f75bd77\cumshot xxx voyeur sm .rar.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_es-es_657d9a203abeb154\kicking blowjob voyeur .mpg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-h..-hmeshare.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_00225053e03f4c04\brasilian beastiality bukkake [milf] glans .rar.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-h..-hmeshare.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_8c6fc5a7aa8c435d\blowjob several models high heels .mpg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-p..al-securitytemplate_31bf3856ad364e35_6.1.7600.16385_none_49dd84a06c7c8863\swedish action gay uncut (Liz).mpg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\Downloaded Program Files\gay big feet hotel (Karin).rar.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\trambling catfight .mpg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\Downloads\tyrkish animal fucking [bangbus] hairy .rar.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\lesbian lesbian .mpg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\russian beastiality blowjob big glans Ôë .mpeg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE56E.tmp\black action lingerie [free] .mpeg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_0835101f2d90c7b6\fetish horse full movie cock lady .mpeg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.1.7601.17514_none_6f0f7833cb71e18d\american gang bang fucking sleeping feet .avi.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor\swedish nude xxx catfight cock (Jenna,Karin).avi.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 1368 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 2292 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 1368 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 1072 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 2820 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 2292 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 1368 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 2896 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 3020 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 688 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 1072 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 1676 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 2292 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 1368 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 2820 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 2768 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 2896 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 1952 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 2840 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 1072 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 1516 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 1584 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 1152 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 3020 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 2056 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 2292 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 1676 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 2068 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 688 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 1368 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 2820 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 380 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 1056 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 2768 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 1484 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 1620 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 2896 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 1396 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 2840 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 1952 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 2388 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 1072 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 2308 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 1516 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 3020 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 2264 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 1648 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 2292 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 1612 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 1824 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 1612 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 1824 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 1676 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 1676 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 1656 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 1656 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 1368 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 1368 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 688 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 688 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 2288 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 2288 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 2424 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 2424 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 1368 wrote to memory of 2292 1368 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 28 PID 1368 wrote to memory of 2292 1368 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 28 PID 1368 wrote to memory of 2292 1368 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 28 PID 1368 wrote to memory of 2292 1368 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 28 PID 2292 wrote to memory of 1072 2292 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 29 PID 2292 wrote to memory of 1072 2292 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 29 PID 2292 wrote to memory of 1072 2292 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 29 PID 2292 wrote to memory of 1072 2292 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 29 PID 1368 wrote to memory of 2820 1368 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 30 PID 1368 wrote to memory of 2820 1368 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 30 PID 1368 wrote to memory of 2820 1368 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 30 PID 1368 wrote to memory of 2820 1368 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 30 PID 1072 wrote to memory of 2896 1072 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 31 PID 1072 wrote to memory of 2896 1072 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 31 PID 1072 wrote to memory of 2896 1072 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 31 PID 1072 wrote to memory of 2896 1072 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 31 PID 2292 wrote to memory of 3020 2292 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 32 PID 2292 wrote to memory of 3020 2292 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 32 PID 2292 wrote to memory of 3020 2292 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 32 PID 2292 wrote to memory of 3020 2292 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 32 PID 2820 wrote to memory of 688 2820 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 33 PID 2820 wrote to memory of 688 2820 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 33 PID 2820 wrote to memory of 688 2820 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 33 PID 2820 wrote to memory of 688 2820 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 33 PID 1368 wrote to memory of 1676 1368 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 34 PID 1368 wrote to memory of 1676 1368 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 34 PID 1368 wrote to memory of 1676 1368 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 34 PID 1368 wrote to memory of 1676 1368 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 34 PID 2896 wrote to memory of 2768 2896 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 35 PID 2896 wrote to memory of 2768 2896 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 35 PID 2896 wrote to memory of 2768 2896 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 35 PID 2896 wrote to memory of 2768 2896 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 35 PID 1072 wrote to memory of 1952 1072 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 36 PID 1072 wrote to memory of 1952 1072 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 36 PID 1072 wrote to memory of 1952 1072 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 36 PID 1072 wrote to memory of 1952 1072 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 36 PID 3020 wrote to memory of 2840 3020 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 37 PID 3020 wrote to memory of 2840 3020 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 37 PID 3020 wrote to memory of 2840 3020 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 37 PID 3020 wrote to memory of 2840 3020 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 37 PID 1676 wrote to memory of 1584 1676 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 38 PID 1676 wrote to memory of 1584 1676 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 38 PID 1676 wrote to memory of 1584 1676 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 38 PID 1676 wrote to memory of 1584 1676 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 38 PID 2292 wrote to memory of 1516 2292 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 39 PID 2292 wrote to memory of 1516 2292 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 39 PID 2292 wrote to memory of 1516 2292 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 39 PID 2292 wrote to memory of 1516 2292 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 39 PID 688 wrote to memory of 1152 688 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 40 PID 688 wrote to memory of 1152 688 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 40 PID 688 wrote to memory of 1152 688 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 40 PID 688 wrote to memory of 1152 688 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 40 PID 1368 wrote to memory of 2068 1368 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 41 PID 1368 wrote to memory of 2068 1368 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 41 PID 1368 wrote to memory of 2068 1368 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 41 PID 1368 wrote to memory of 2068 1368 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 41 PID 2820 wrote to memory of 2056 2820 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 42 PID 2820 wrote to memory of 2056 2820 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 42 PID 2820 wrote to memory of 2056 2820 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 42 PID 2820 wrote to memory of 2056 2820 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 42 PID 2768 wrote to memory of 380 2768 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 43 PID 2768 wrote to memory of 380 2768 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 43 PID 2768 wrote to memory of 380 2768 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 43 PID 2768 wrote to memory of 380 2768 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 43
Processes
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"1⤵
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1368 -
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2292 -
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1072 -
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2896 -
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2768 -
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵
- Suspicious behavior: EnumeratesProcesses
PID:380 -
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:1704
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:3324
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"9⤵PID:5396
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"10⤵PID:10316
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"11⤵PID:19312
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"10⤵PID:19016
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"9⤵PID:7876
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"10⤵PID:19460
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"9⤵PID:12644
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"9⤵PID:25980
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:4796
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"9⤵PID:8696
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"9⤵PID:18856
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:7040
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"9⤵PID:18872
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:11484
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:26128
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:3460
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:5676
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"9⤵PID:10296
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"10⤵PID:10568
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"9⤵PID:18936
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:8276
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:12748
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:25944
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:4876
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:9288
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"9⤵PID:22600
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:18896
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:6756
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:18960
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:11844
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:18060
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:1392
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:3360
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:5464
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"9⤵PID:11544
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"9⤵PID:19216
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:7836
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"9⤵PID:20736
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:11680
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:11228
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:4824
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:8596
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"9⤵PID:19432
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:19096
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:7088
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:14220
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:11600
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:12992
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:3544
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:5848
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:11704
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:25652
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:8352
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:19588
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:18400
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:5088
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:9456
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:19408
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:19024
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:7428
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:19476
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:11456
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
PID:1056 -
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:1388
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:3476
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:5600
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"9⤵PID:11672
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"9⤵PID:22616
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:8328
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"9⤵PID:18728
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:18548
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:4864
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:9144
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:19144
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:7164
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:14116
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:11836
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:18944
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:3432
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:5572
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:11780
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:25920
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:7772
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:19636
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:14192
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:20652
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:4832
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:9152
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:18768
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:18176
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:7120
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:18304
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:11632
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:25872
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:2664
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:3420
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:5612
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:11468
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:19136
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:8268
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:19484
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:14036
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:4848
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:8408
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:18928
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:18572
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:6200
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:11796
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:11624
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:11944
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:3560
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:5888
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:11696
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:18112
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:8336
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:20548
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:18212
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:4140
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:9020
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:18332
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:14232
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:6216
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:19492
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:12048
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:26024
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:1952 -
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
PID:1620 -
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:2676
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:3688
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:5916
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"9⤵PID:13836
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:9464
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"9⤵PID:21000
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:18260
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:4688
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:10076
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:19352
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:7536
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:12328
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:3592
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:5340
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:12272
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:25928
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:8652
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:18752
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:18664
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:4364
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:9472
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:18168
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:7396
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:18340
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:12056
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:17488
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:2528
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:4024
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:6652
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:13912
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:10660
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:19172
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:5492
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:10500
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:18636
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:8300
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:19612
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:12548
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:17552
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:3868
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:6336
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:16772
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:10652
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:18912
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:5292
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:11460
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:19040
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:8064
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:11720
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:17744
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:1396 -
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:2096
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:3788
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:6172
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:13876
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:10068
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:21008
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:19112
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:5236
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:11440
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:19232
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:7824
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:14084
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:12416
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:11380
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:3656
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:6096
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:12440
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:26152
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:9720
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:19128
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:4644
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:10324
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:18920
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:7544
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:18808
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:12312
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:2636
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:3924
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:6460
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:19556
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:10684
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:19000
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:18620
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:5364
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:10912
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:22648
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:7748
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:12672
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:3860
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:6384
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:13940
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:10692
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:19248
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:5284
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:10940
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:7892
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:22608
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:14004
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3020 -
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:2840 -
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
PID:1484 -
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:2744
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:3748
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:5316
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"9⤵PID:12352
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"9⤵PID:26112
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:10044
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:18644
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:5016
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:9736
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:18444
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:7756
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:19524
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:11728
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:3552
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:5880
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:11492
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:7736
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:18424
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:11648
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:11316
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:4148
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:9128
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:22672
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:18204
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:6496
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:18800
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:11552
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:25904
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:2968
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:3732
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:5832
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:12424
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:12008
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:10052
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:19328
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:4136
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:11432
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:19152
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:7740
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:12376
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:25364
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:3580
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:5300
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:11744
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:8612
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:19184
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:14060
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:4332
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:9792
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:19264
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:7384
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:18784
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:12064
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:26144
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:2264 -
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:1508
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:4308
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:8116
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:18200
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:11664
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:12092
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:6480
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:13948
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:18084
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:10540
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:18952
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:18652
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:3840
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:6404
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:12520
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:26204
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:11804
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:6056
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:11772
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:25912
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:8636
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:18700
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:19048
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:2600
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:3176
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:6928
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:14200
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:11516
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:18052
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:5728
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:10920
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:19336
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:18484
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:8292
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:18220
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:12536
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:11288
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:3896
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:6356
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:13980
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:10492
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:19072
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:5320
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:11476
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:19224
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:8056
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:18844
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:11592
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:11980
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:1516 -
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:2388 -
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:2100
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:4116
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:7500
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:19572
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:12368
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:18520
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:5744
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:11828
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:8836
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:3320
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:12280
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:25952
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:4080
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:6948
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:19540
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:11640
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:19440
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:5720
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:11448
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:19160
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:8284
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:12456
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:25936
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:2540
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:4068
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:6996
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:19508
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:11608
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:18104
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:5628
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:10604
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:19288
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:8360
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:18832
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:3880
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:6252
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:13932
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:10000
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:19368
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:5308
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:10928
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:5672
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:7868
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:19628
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:12268
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:26248
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:2308 -
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:2868
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:4248
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:7508
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:19208
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:12004
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:26120
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:6192
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:13844
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:10036
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:18968
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:3912
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:156
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:14260
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:11852
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:26136
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:6100
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:11892
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:25880
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:8620
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:668
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:14052
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:2404
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:3380
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:6884
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:12244
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:17292
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:10700
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:19296
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:5704
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:10596
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:19384
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:8344
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:18564
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:3968
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:6672
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:16536
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:10508
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:18720
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:19104
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:5416
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:10948
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:19448
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:8152
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:19604
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:12400
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:12140
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2820 -
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:688 -
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:1152 -
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
PID:2424 -
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:3184
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:5220
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:10288
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"9⤵PID:18236
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:19344
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:8072
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:18792
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:11560
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:19056
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:4516
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:8320
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:18556
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:6592
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:12360
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:18488
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:10516
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:19008
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:2252
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:4904
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:8588
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:14044
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:6260
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:18244
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:11764
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:4336
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:7924
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:11688
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:25960
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:6512
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:16744
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:10636
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:19120
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:1612 -
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:1532
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:4636
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:8392
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:20992
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:12448
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:26080
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:6844
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:18868
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:10708
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:19240
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:4172
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:7172
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:19580
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:12040
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:5580
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:11820
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:17516
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:8872
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:19596
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:11736
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:808
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:4660
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:8312
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:18880
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:6856
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:14068
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:26212
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:10484
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:19080
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:4180
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:7224
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:18884
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:12296
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:25888
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:5712
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:11860
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:11964
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:8896
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:12304
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:17504
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:2056 -
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:2460
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:3200
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:5184
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:10620
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:19256
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:7692
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:12656
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:16392
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:4500
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:8200
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:18416
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:11616
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:18276
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:6572
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:14240
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:10668
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:5584
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:2960
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:5000
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:9992
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:19424
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:6588
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:19532
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:11868
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:18100
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:4416
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:8224
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:12632
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:26008
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:6628
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:16756
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:10524
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:18992
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:1656 -
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:3088
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:4540
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:9828
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:19400
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:7604
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:9108
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:12392
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:17828
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:4484
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:8096
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:14208
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:25988
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:6616
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:13852
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:10304
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:19088
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:2200
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:4816
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:8844
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:12344
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:18140
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:7056
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:19500
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:11788
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:18036
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:4216
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:7416
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:19200
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:11908
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:17736
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:6208
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:11500
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:22624
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:10060
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:8684
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:19032
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1676 -
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:1584 -
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:612
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:3220
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:5212
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:11880
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:26072
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:7780
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:18816
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:12408
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:18092
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:4508
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:8856
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:19548
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:11888
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:26088
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:6604
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:18408
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:11508
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:18708
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:11996
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:2060
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:4948
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:9136
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:19468
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:18228
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:6624
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:12432
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:11584
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:17672
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:4344
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:7884
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:18876
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:12320
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:6504
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:13924
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:10628
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:19168
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:1648 -
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:1552
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:4388
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:8024
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:12384
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:26064
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:6488
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:14076
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:10532
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:19064
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:3888
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:6956
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:13904
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:26612
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:11712
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:25896
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:6048
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:10612
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:19280
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:8644
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:18540
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:1460
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:4128
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:7204
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:19564
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:12260
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:5412
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:11812
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:8888
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:19620
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:12072
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:3696
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:6560
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:18312
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:11536
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:25292
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:6084
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:11656
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:19272
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:8628
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:18744
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:14028
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
PID:2068 -
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:2288 -
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:3164
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:5008
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:10084
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:18760
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:18976
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:7676
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:18824
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:12664
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:4476
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:7984
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:11568
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:18528
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:6564
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:18324
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:10644
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:18480
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:2164
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:4932
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:9160
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:18672
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:6664
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:19192
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:11576
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:19376
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:17064
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:4320
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:7848
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:18904
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:14100
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:6368
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:16780
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:10008
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:19360
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
PID:1824 -
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:2236
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:4700
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:8604
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:19304
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:14020
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:6960
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:14012
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:11524
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:25968
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:4204
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:7248
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:19516
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:11924
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:26016
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:5404
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:13972
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:9728
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:18984
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"2⤵PID:2392
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:4592
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:8864
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:11932
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:25996
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:6908
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:16476
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:10676
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:19320
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"2⤵PID:4160
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:7180
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:19392
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:12336
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:26096
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"2⤵PID:5500
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:11900
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:18068
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"2⤵PID:8880
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:18252
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"2⤵PID:11756
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:18680
-
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.5MB
MD5e23287f4f775ebfea9276c480345f078
SHA13edb737e709e55b4ada5e6c51d812618bf0f640b
SHA256e614fe766136f2be57de9f8835875366b688337b2bac92e21fbad07f0d9e0cc6
SHA512611f0d9e136ece6d5372127ca214707746678a553152f06cc6da651e4e20fa75818e1d1d38ac4b3ca98765c7d0b866476f432f4620706beafb89b5ed5d6ba326
-
Filesize
183B
MD584236fb0863b0850d78336e7480ba5a1
SHA155c3edda368bd6ad3dc979ba6bdfc64c0fdf0b24
SHA256201f17a1547c02a4f732a9483b9975f0bacb4ef665032e33474420124026db33
SHA5128cda165b8a8f47ad7eb7d2d6f6635e6285492d7d248af218cf011f581d5a60138ee4437f6bd6cf8e95e0bfb6b33182f4bd624c2e20b49aab0b9dd9cf4870a306