Analysis
-
max time kernel
25s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
27-06-2024 12:46
Static task
static1
Behavioral task
behavioral1
Sample
85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
General
-
Target
85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe
-
Size
1.3MB
-
MD5
99f2c1b67084bf22aa51302db33bbd70
-
SHA1
5782dcefd5db3c0bc5d50dd61a96e422f1a38e9c
-
SHA256
85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57
-
SHA512
6a30176cb3f2fbd5538a8b086959281a0f17161b62aea0915fd416a38cf8bbdbcb29042313ef2aaeacdc81fd4f2447b92b6081a1be7b4196b8354d7f55f318b1
-
SSDEEP
24576:oW36OEcE6FgXFiXl60JAxGcV+bE4zAUiKsyJuEVHcc8ln5IqBDjKg:V1Ecs110JAwcViE4zzsyJuEVHUlnpYg
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\J: 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File opened (read-only) \??\K: 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File opened (read-only) \??\L: 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File opened (read-only) \??\M: 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File opened (read-only) \??\P: 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File opened (read-only) \??\Q: 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File opened (read-only) \??\U: 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File opened (read-only) \??\X: 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File opened (read-only) \??\Z: 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File opened (read-only) \??\B: 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File opened (read-only) \??\I: 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File opened (read-only) \??\S: 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File opened (read-only) \??\V: 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File opened (read-only) \??\A: 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File opened (read-only) \??\G: 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File opened (read-only) \??\N: 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File opened (read-only) \??\T: 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File opened (read-only) \??\E: 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File opened (read-only) \??\H: 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File opened (read-only) \??\O: 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File opened (read-only) \??\R: 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File opened (read-only) \??\W: 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File opened (read-only) \??\Y: 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe -
Drops file in System32 directory 10 IoCs
description ioc Process File created C:\Windows\SysWOW64\IME\shared\brasilian handjob trambling full movie swallow .rar.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\System32\LogFiles\Fax\Incoming\japanese horse sperm catfight redhair .mpg.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\trambling [bangbus] hole .zip.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\russian animal lesbian hidden feet balls (Janette).mpeg.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\danish animal lingerie licking .zip.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\italian porn xxx lesbian glans .zip.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\System32\DriverStore\Temp\bukkake lesbian cock .rar.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\swedish action bukkake licking glans redhair .mpg.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\trambling uncut latex (Gina,Janette).avi.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\shared\bukkake public penetration .rar.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe -
Drops file in Program Files directory 15 IoCs
description ioc Process File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\brasilian kicking lingerie masturbation (Jade).rar.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\blowjob big .rar.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Notebook Templates\xxx licking cock .mpg.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\beast sleeping young .zip.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\DocumentShare\trambling sleeping .mpg.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Office\Templates\black cum fucking masturbation .rar.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\horse masturbation titts blondie .avi.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Program Files\Common Files\Microsoft Shared\blowjob public black hairunshaved (Sandy,Tatjana).mpeg.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Shared\horse big feet .mpg.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Update\Download\lesbian [bangbus] .zip.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Program Files\Windows Journal\Templates\blowjob sleeping hole wifey .avi.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\microsoft shared\tyrkish gang bang hardcore big (Sarah).zip.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\XML Files\Space Templates\danish gang bang horse public .zip.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\IDTemplates\sperm full movie glans stockings .mpg.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Temp\xxx masturbation cock .mpg.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\assembly\GAC_MSIL\Microsoft.SharePoint.BusinessData.Administration.Client.Intl\italian action horse masturbation titts ejaculation .mpeg.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-h..-hmeshare.resources_31bf3856ad364e35_6.1.7600.16385_es-es_5d6ada54ed6d35a2\horse several models shoes .mpeg.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sharedaccess_31bf3856ad364e35_6.1.7600.16385_none_60c2504d62fd4f0e\african xxx [bangbus] hairy .zip.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sx-shared_31bf3856ad364e35_6.1.7600.16385_none_9498b282333b64ec\japanese nude beast voyeur latex .mpg.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft.grouppolicy.admtmpleditor_31bf3856ad364e35_6.1.7601.17514_none_39374e2435a71b47\horse voyeur glans swallow (Samantha).avi.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_6.1.7601.17514_none_4fe2107fd06efdd8\indian porn gay hidden (Tatjana).zip.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.1.7601.17514_none_6f0f7833cb71e18d\french bukkake lesbian feet bedroom .mpeg.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_a3772de7111797da\cum hardcore [bangbus] titts leather .mpg.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_it-it_97a45841ff925aa0\porn sperm [free] glans (Sandy,Jade).mpeg.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_de-de_6208b91f46896156\british sperm full movie glans balls .rar.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sharedfolders-adm_31bf3856ad364e35_6.1.7600.16385_none_af6f98ff87b0e3cc\lesbian voyeur leather .avi.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_netfx-shared_registry_whidbey_31bf3856ad364e35_6.1.7600.16385_none_c26c5b8280c6af34\spanish blowjob [milf] sm .avi.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_en-us_65b23d3c3a97bfaf\malaysia lesbian masturbation .mpg.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-h..-hmeshare.resources_31bf3856ad364e35_6.1.7600.16385_it-it_ea4a469ab7713182\lingerie hidden titts YEâPSè& (Samantha).mpg.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_6.1.7600.16385_es-es_8bc7919d3f36cee7\cumshot horse hidden (Melissa).rar.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_bacc7ceffc55dca2\horse beast girls titts gorgeoushorny (Karin).rar.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_2fc4a33adb648f33\xxx sleeping hairy .avi.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_es-es_0ac4ebfc358e5ec0\cum horse catfight .avi.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-vsssystemprovider_31bf3856ad364e35_6.1.7600.16385_none_a727eb798dcfb185\bukkake hot (!) leather .rar.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\mssrv.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor.Resources\hardcore [milf] (Jade).avi.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\russian nude bukkake catfight Ôë .rar.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\Downloads\indian kicking lesbian lesbian glans balls (Liz).zip.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\fucking masturbation sweet (Sonja,Karin).zip.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Templates\lesbian voyeur young .mpeg.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-p..al-securitytemplate_31bf3856ad364e35_6.1.7600.16385_none_49dd84a06c7c8863\nude trambling big (Sylvia).rar.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_netfx-aspnet_installsqlstatetemp_b03f5f7f11d50a3a_6.1.7600.16385_none_16a2bb1dbab1c595\british sperm girls titts .mpeg.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAP6B8E.tmp\indian fetish horse full movie .rar.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\Downloads\black nude sperm big cock traffic (Jade).mpeg.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sharedfoldersui_31bf3856ad364e35_6.1.7600.16385_none_1412267f4b3bb985\indian action blowjob licking ash .avi.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\Downloaded Program Files\horse gay voyeur glans blondie .avi.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\danish cum hardcore big glans fishy .zip.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Templates\beast voyeur cock .mpeg.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_6.1.7601.17514_none_d81c96999f75bd77\chinese sperm masturbation .zip.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor.Resources\horse hidden glans redhair .avi.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\assembly\GAC_32\Microsoft.SharePoint.BusinessData.Administration.Client\brasilian fetish trambling [milf] bedroom .mpg.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\tyrkish fetish horse catfight glans .zip.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\assembly\temp\american handjob trambling voyeur ìï .mpg.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_6.1.7600.16385_de-de_5803850b2f40840e\chinese trambling public .avi.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_netfx-shared_netfx_20_mscorwks_31bf3856ad364e35_6.1.7600.16385_none_dba3691c6002e10e\tyrkish horse horse full movie .mpg.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-h..-hmeshare.resources_31bf3856ad364e35_6.1.7600.16385_de-de_b4aea777fe683838\spanish lesbian masturbation glans beautyfull (Curtney).zip.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\trambling sleeping glans swallow .zip.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-d..-ime-eashared-proxy_31bf3856ad364e35_6.1.7600.16385_none_f27c4f066f5c6701\sperm [milf] hole circumcision .avi.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_6.1.7601.17514_none_98b24799b5d08c05\black cumshot fucking [bangbus] feet boots .zip.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_0835101f2d90c7b6\italian porn fucking [free] cock mature .avi.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_94828572f7ddbf0f\german fucking licking feet .rar.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-h..-hmeshare.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_00225053e03f4c04\swedish nude sperm big traffic .mpg.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-ime-eashared-ccshared_31bf3856ad364e35_6.1.7601.17514_none_34400a5790d1d336\nude lesbian lesbian (Janette).mpeg.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_6.1.7600.16385_en-us_00f45b041e1e8fd3\french gay [milf] redhair .mpeg.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE56E.tmp\swedish kicking fucking masturbation mature .mpeg.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_6.1.7600.16385_none_293ea1e3e6bc5364\cumshot beast voyeur hole sm .zip.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_6.1.7600.16385_none_99b74194b7347cab\canadian lingerie masturbation gorgeoushorny .zip.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_it-it_f25d066604c2ad34\fetish hardcore catfight beautyfull (Sandy,Jade).rar.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_netfx-shared_netfx_20_perfcounter_31bf3856ad364e35_6.1.7600.16385_none_a945e2c500c90142\handjob sperm [free] feet 50+ (Jade).zip.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_2e7f079c3208e549\animal bukkake girls .zip.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_6.1.7600.16385_it-it_18a6fde3093acac7\chinese fucking masturbation hole mistress .mpg.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_ad7c61fb28607522\chinese hardcore sleeping glans girly .rar.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-systempropertiesremote_31bf3856ad364e35_6.1.7600.16385_none_f0ca3430257ea13f\bukkake girls bedroom .zip.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-nfs-shared_31bf3856ad364e35_6.1.7600.16385_none_6377027f0030a06a\black beastiality lesbian several models feet young .zip.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-p2p-pnrp-adm_31bf3856ad364e35_6.1.7600.16385_none_5499606faffb3f9f\gang bang sperm several models glans granny (Janette).mpg.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE291.tmp\italian nude beast hot (!) hotel (Kathrin,Jade).avi.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\beast [bangbus] .mpg.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\PLA\Templates\trambling licking cock .zip.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\black porn lingerie [free] glans (Anniston,Sylvia).mpg.exe 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 1856 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 2804 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 1856 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 2564 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 3036 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 1856 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 2804 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 2900 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 2116 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 2564 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 2764 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 1620 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 3036 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 1856 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 2804 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 1596 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 2140 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 1664 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 2900 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 2564 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 2824 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 2868 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 2116 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 2764 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 2752 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 1748 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 1620 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 3036 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 2068 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 1856 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 2804 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 2500 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 2044 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 1596 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 2888 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 2140 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 532 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 2900 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 2564 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 1472 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 2020 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 2764 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 2764 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 1664 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 1664 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 316 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 316 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 1480 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 1480 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 1540 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 1540 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 2824 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 2824 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 2116 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 2116 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 2484 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 2484 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 2384 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 2384 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 1856 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 1856 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 2868 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 2868 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 1748 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 1856 wrote to memory of 2804 1856 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 28 PID 1856 wrote to memory of 2804 1856 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 28 PID 1856 wrote to memory of 2804 1856 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 28 PID 1856 wrote to memory of 2804 1856 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 28 PID 2804 wrote to memory of 2564 2804 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 29 PID 2804 wrote to memory of 2564 2804 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 29 PID 2804 wrote to memory of 2564 2804 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 29 PID 2804 wrote to memory of 2564 2804 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 29 PID 1856 wrote to memory of 3036 1856 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 30 PID 1856 wrote to memory of 3036 1856 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 30 PID 1856 wrote to memory of 3036 1856 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 30 PID 1856 wrote to memory of 3036 1856 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 30 PID 2564 wrote to memory of 2900 2564 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 31 PID 2564 wrote to memory of 2900 2564 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 31 PID 2564 wrote to memory of 2900 2564 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 31 PID 2564 wrote to memory of 2900 2564 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 31 PID 3036 wrote to memory of 2116 3036 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 32 PID 3036 wrote to memory of 2116 3036 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 32 PID 3036 wrote to memory of 2116 3036 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 32 PID 3036 wrote to memory of 2116 3036 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 32 PID 2804 wrote to memory of 2764 2804 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 33 PID 2804 wrote to memory of 2764 2804 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 33 PID 2804 wrote to memory of 2764 2804 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 33 PID 2804 wrote to memory of 2764 2804 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 33 PID 1856 wrote to memory of 1620 1856 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 34 PID 1856 wrote to memory of 1620 1856 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 34 PID 1856 wrote to memory of 1620 1856 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 34 PID 1856 wrote to memory of 1620 1856 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 34 PID 2900 wrote to memory of 1596 2900 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 35 PID 2900 wrote to memory of 1596 2900 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 35 PID 2900 wrote to memory of 1596 2900 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 35 PID 2900 wrote to memory of 1596 2900 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 35 PID 2564 wrote to memory of 1664 2564 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 36 PID 2564 wrote to memory of 1664 2564 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 36 PID 2564 wrote to memory of 1664 2564 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 36 PID 2564 wrote to memory of 1664 2564 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 36 PID 2116 wrote to memory of 2140 2116 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 37 PID 2116 wrote to memory of 2140 2116 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 37 PID 2116 wrote to memory of 2140 2116 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 37 PID 2116 wrote to memory of 2140 2116 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 37 PID 2764 wrote to memory of 2824 2764 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 38 PID 2764 wrote to memory of 2824 2764 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 38 PID 2764 wrote to memory of 2824 2764 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 38 PID 2764 wrote to memory of 2824 2764 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 38 PID 1620 wrote to memory of 2752 1620 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 40 PID 1620 wrote to memory of 2752 1620 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 40 PID 1620 wrote to memory of 2752 1620 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 40 PID 1620 wrote to memory of 2752 1620 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 40 PID 3036 wrote to memory of 2868 3036 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 39 PID 3036 wrote to memory of 2868 3036 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 39 PID 3036 wrote to memory of 2868 3036 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 39 PID 3036 wrote to memory of 2868 3036 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 39 PID 1856 wrote to memory of 1748 1856 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 41 PID 1856 wrote to memory of 1748 1856 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 41 PID 1856 wrote to memory of 1748 1856 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 41 PID 1856 wrote to memory of 1748 1856 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 41 PID 2804 wrote to memory of 2068 2804 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 42 PID 2804 wrote to memory of 2068 2804 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 42 PID 2804 wrote to memory of 2068 2804 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 42 PID 2804 wrote to memory of 2068 2804 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 42 PID 1596 wrote to memory of 2500 1596 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 43 PID 1596 wrote to memory of 2500 1596 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 43 PID 1596 wrote to memory of 2500 1596 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 43 PID 1596 wrote to memory of 2500 1596 85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe 43
Processes
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"1⤵
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1856 -
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2804 -
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2564 -
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2900 -
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1596 -
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵
- Suspicious behavior: EnumeratesProcesses
PID:2500 -
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:1984
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"8⤵PID:3344
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"9⤵PID:5208
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"10⤵PID:10680
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"10⤵PID:3124
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"10⤵PID:13248
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"9⤵PID:7772
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"9⤵PID:10848
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"9⤵PID:18712
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"9⤵PID:2152
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"8⤵PID:4572
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"9⤵PID:8248
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"9⤵PID:14756
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"9⤵PID:4780
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"8⤵PID:6608
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"8⤵PID:9108
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"8⤵PID:18152
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:3376
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"8⤵PID:5392
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"9⤵PID:10864
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"9⤵PID:1096
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"8⤵PID:7988
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"8⤵PID:18244
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:4640
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"8⤵PID:8500
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"8⤵PID:13588
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"8⤵PID:20212
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:6696
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:9116
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:18060
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:12004
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:2332
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:3644
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"8⤵PID:6220
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"8⤵PID:10340
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"8⤵PID:4568
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:5196
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"8⤵PID:19928
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:7980
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:18236
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:13448
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:3444
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:5728
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:9196
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:18292
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:5064
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:9464
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:18012
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:7368
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:14772
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:6196
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
PID:2888 -
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:2192
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:4032
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"8⤵PID:7120
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"8⤵PID:11448
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"8⤵PID:19832
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:5612
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:8420
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:18160
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:13436
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:3580
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:5912
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:10264
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:19704
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:1556
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:11008
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:7904
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:10832
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:19632
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:1344
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:3724
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:6404
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:8644
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:19232
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:5268
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:10592
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:19656
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:8032
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:14080
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:19616
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:3484
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:5880
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:9288
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:19272
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:4228
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:10648
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:19672
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:7384
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:14716
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:19824
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:1664 -
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
PID:2020 -
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:2352
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:4196
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"8⤵PID:7020
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"8⤵PID:11464
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"8⤵PID:19760
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:5328
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:10988
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:19584
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:3832
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:6592
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"8⤵PID:10744
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"8⤵PID:19648
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:11116
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:19608
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:5448
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:19936
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:8208
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:18084
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:21832
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:2664
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:4216
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:8132
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:14764
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:19696
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:5572
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:11056
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:19576
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:3876
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:6828
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:9312
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:20016
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:5488
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:7852
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:18276
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:13748
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:532 -
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:2920
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:4116
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:7896
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:18120
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:5668
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:10300
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:2380
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:9832
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:3604
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:5532
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:9436
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:13872
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:19752
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:5144
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:10996
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:4872
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:7524
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:10316
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:6272
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:3068
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:3688
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:6332
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:8652
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:19224
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:5244
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:10672
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:4760
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:7864
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:11496
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:19952
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:3476
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:5904
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:9220
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:18388
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:4156
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:10856
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:20188
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:7400
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:14668
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:19528
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2764 -
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:2824 -
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
PID:1480 -
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:2780
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:4764
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"8⤵PID:9144
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"8⤵PID:19296
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"8⤵PID:12532
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:7156
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:10808
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:5892
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:3936
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:6600
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:9092
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:18212
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:10064
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:5564
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:18408
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:948
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:8540
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:13880
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:20228
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:2720
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:4144
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:7628
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:11024
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:8196
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:5664
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:10284
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:4296
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:3868
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:6728
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:9076
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:932
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:20420
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:5472
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:13660
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:19808
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:7856
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:18268
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:316 -
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:1128
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:4344
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:7996
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:16388
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:3420
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:6624
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:9228
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:18108
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:13776
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:3896
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:6576
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:10696
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:19308
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:13756
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:11440
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:19520
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:5552
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:20404
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:8684
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:19240
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:1532
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:3404
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:7132
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:14724
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:18464
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:7272
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:5948
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:10736
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:19640
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:9296
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:19280
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:3588
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:5940
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:10524
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:18536
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:4172
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:10728
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:19848
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:7880
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:11304
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:18696
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:2068 -
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:1092
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:3212
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:4180
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:19984
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:7488
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:11072
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:19784
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:4416
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:7536
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:18100
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:6324
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:8676
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:18420
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:9840
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:1584
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:4908
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:9204
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:19768
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:6708
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:11356
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:18428
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:11348
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:3092
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:7804
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:10752
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:19712
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:5304
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:10292
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:18504
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"3⤵PID:1072
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:3152
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:4788
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:10688
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:19316
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:912
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:7788
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:11424
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:6132
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:4376
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:8004
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:18252
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:6284
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:8444
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:18128
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"3⤵PID:1800
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:4824
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:10080
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:19600
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:6308
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:10824
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:18704
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:2440
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"3⤵PID:3776
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:7240
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:12608
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:19872
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"3⤵PID:5180
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"3⤵PID:9332
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"3⤵PID:19568
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3036 -
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2116 -
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:2140 -
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
PID:2044 -
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:2108
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:3412
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"8⤵PID:5524
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"9⤵PID:20024
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"8⤵PID:8016
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"8⤵PID:11632
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"8⤵PID:16844
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"8⤵PID:8228
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:4660
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"8⤵PID:8280
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"8⤵PID:15820
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"8⤵PID:1760
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"8⤵PID:13640
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:6228
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:10816
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:6356
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:3460
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:5816
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:9152
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:19248
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:5092
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:9236
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:18380
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:13608
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:7252
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:13620
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:20156
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:876
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:3656
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:6188
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:11064
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:20008
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:5184
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:10704
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:18472
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:12572
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:6960
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:9304
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:20352
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:3452
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:5772
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:8532
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:14096
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:19536
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:5056
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:9244
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:4808
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:7356
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:13860
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:628
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:9924
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:1472 -
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:2628
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:3140
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:7836
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:11456
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:20204
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:5592
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:9428
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:14024
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:19800
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:3616
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:6136
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:10500
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:19736
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:5172
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:9948
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:7516
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:10308
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:19816
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:2672
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:4300
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:8112
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:14700
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:3208
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:9912
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:5936
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:10396
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:19864
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:3904
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:6756
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:9084
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:18176
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:11624
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:5496
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:13652
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:3040
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:8220
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:12988
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:18260
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:21848
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:2868 -
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:2324
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:3132
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:4680
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:20032
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:7464
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:11040
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:19792
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:4312
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:8232
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:18092
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:8528
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:6616
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:9100
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:18188
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:13360
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:2816
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:4480
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:7952
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:14708
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:19664
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:6376
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:8660
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:20164
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:3708
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:6360
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:8428
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:18196
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:13320
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:5260
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:8256
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:8020
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:14748
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:18448
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:6716
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"3⤵PID:1744
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:3180
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:4832
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:10840
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:20172
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:7472
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:11016
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:19944
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:4396
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:8168
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:14732
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:18440
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:9124
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:6300
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:8668
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:19288
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"3⤵PID:964
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:4856
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:9264
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:18168
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:12552
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:6656
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:12660
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:19920
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"3⤵PID:3664
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:7068
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:11768
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:19324
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"3⤵PID:6124
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:20412
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"3⤵PID:9160
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"3⤵PID:19720
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1620 -
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:2752 -
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:2484 -
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:3084
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:4652
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:10332
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"7⤵PID:19680
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:7480
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:11032
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:19992
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:4188
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:7872
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:18072
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:13256
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:5240
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:10324
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:19688
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:1904
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:4740
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:8520
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:14016
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:19840
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:6344
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:11364
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:19544
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:4056
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:7048
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:11372
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:2776
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:5644
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:8636
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:20000
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:1540 -
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:2536
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:4792
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:9212
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:18372
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:13820
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:6572
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:12648
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:19728
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:3600
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:7196
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:13596
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:20220
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:5980
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:9472
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:18284
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"3⤵PID:824
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:4716
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:9132
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:19264
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:7040
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:11472
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:19880
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"3⤵PID:4068
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:7032
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:12620
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:20180
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"3⤵PID:5652
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:13804
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"3⤵PID:8628
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"3⤵PID:19592
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
PID:1748 -
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"3⤵PID:1372
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:3192
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:4928
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:10872
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"6⤵PID:1380
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:7796
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:11380
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:2588
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:4436
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:7892
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:13476
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:19624
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:6584
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:11128
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:20196
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"3⤵PID:2556
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:4532
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:7828
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:18224
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:13724
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:6792
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:9320
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:6232
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"3⤵PID:3764
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:6264
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:8436
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:18052
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"3⤵PID:5280
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:19776
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"3⤵PID:8040
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"3⤵PID:13852
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"3⤵PID:2948
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"3⤵PID:9932
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
PID:2384 -
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"3⤵PID:3108
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:4584
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:13572
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"5⤵PID:20148
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:7780
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:11432
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:19856
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"3⤵PID:4276
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:7812
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:17832
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:21824
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"3⤵PID:5924
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"3⤵PID:10404
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"3⤵PID:3012
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"2⤵PID:2952
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"3⤵PID:4472
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:8508
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:13632
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"4⤵PID:20236
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"3⤵PID:6772
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"3⤵PID:9280
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"3⤵PID:19256
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"3⤵PID:11084
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"2⤵PID:3680
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"3⤵PID:5976
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"3⤵PID:10384
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"3⤵PID:18480
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"3⤵PID:11484
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"2⤵PID:5228
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"3⤵PID:19744
-
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"2⤵PID:7944
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"2⤵PID:14740
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"2⤵PID:18456
-
-
C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\85bdf0eef4e9a03bde78f47f3cbaf4d650715c65da065f4a7fede94d3c6b5b57_NeikiAnalytics.exe"2⤵PID:14516
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
92KB
MD510d8cbb2d03983ce7b684f104a845181
SHA1a60458ebd84e74d512d6cc7ca0a46db67b55b341
SHA256777fc3bb73e95e3dea90b1cc86c52a3d193581185c9940a4000c25604b2783f1
SHA512d016ba93734601cd2acc622ae4ab770dd139b726aa0d0acf650e071258c6800b4423242b3b2276390ed06c9bd359bee08417703332845dd863d1ce002e16b217