Analysis
-
max time kernel
15s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
13/05/2024, 14:55
Behavioral task
behavioral1
Sample
bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe
-
Size
1.7MB
-
MD5
bc3bcc56af3f02895991d03c55606860
-
SHA1
55d11b3e44fbe24f3b314fdd3d96b5360f86cf21
-
SHA256
b7b037d91d3dfa5a4fb1c785057f88fe83da8fce4dfbbf91d342015adeb76728
-
SHA512
f68ab122ac12d46ad641c0d1078c7e2f1f28d6d403813bc3655e476e005e1470f49bab463860d0f07a9f31a4d0b5d6fc6c955accb0f4773bec204aff087b1bf1
-
SSDEEP
24576:V/WcY0d0h0tcvd77c8eMEHkMeohdREvS1bl0WeBOgprzMfoWR4yg8bj4D1:7Yiu+8eMEHk3oBQol43qoWey54R
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 16 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000\Control Panel\International\Geo\Nation bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000\Control Panel\International\Geo\Nation bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000\Control Panel\International\Geo\Nation bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000\Control Panel\International\Geo\Nation bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000\Control Panel\International\Geo\Nation bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000\Control Panel\International\Geo\Nation bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000\Control Panel\International\Geo\Nation bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000\Control Panel\International\Geo\Nation bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000\Control Panel\International\Geo\Nation bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000\Control Panel\International\Geo\Nation bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000\Control Panel\International\Geo\Nation bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000\Control Panel\International\Geo\Nation bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000\Control Panel\International\Geo\Nation bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000\Control Panel\International\Geo\Nation bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000\Control Panel\International\Geo\Nation bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000\Control Panel\International\Geo\Nation bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
resource yara_rule behavioral2/memory/2596-0-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/files/0x0007000000023436-5.dat upx behavioral2/memory/544-41-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/1060-154-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/4076-153-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/1712-181-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/3936-183-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/3060-182-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/3696-184-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/2272-186-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/2428-185-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/372-189-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/4028-188-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/628-187-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/1828-191-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/2596-190-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/544-192-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/2920-194-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/4076-193-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/3732-195-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/1060-197-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/808-198-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/1464-200-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/1712-199-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/2212-203-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/3696-204-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/3936-202-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/3060-201-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/4316-206-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/2428-205-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/4492-209-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/4968-211-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/2272-210-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/4396-208-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/2832-207-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/1668-215-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/3924-216-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/744-217-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/4028-213-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/628-212-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/372-214-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5236-219-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/2920-218-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/3732-220-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5224-222-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5216-221-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/1464-225-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5356-224-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/808-223-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5364-226-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5496-233-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/2212-230-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/4492-236-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5540-242-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5508-240-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5532-239-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5516-238-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5524-237-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/2832-234-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/4396-235-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5472-232-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/4316-231-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5480-243-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/1668-244-0x0000000000400000-0x000000000041F000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\E: bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File opened (read-only) \??\P: bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File opened (read-only) \??\T: bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File opened (read-only) \??\U: bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File opened (read-only) \??\W: bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File opened (read-only) \??\X: bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File opened (read-only) \??\Y: bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File opened (read-only) \??\A: bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File opened (read-only) \??\K: bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File opened (read-only) \??\L: bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File opened (read-only) \??\M: bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File opened (read-only) \??\O: bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File opened (read-only) \??\Q: bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File opened (read-only) \??\R: bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File opened (read-only) \??\V: bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File opened (read-only) \??\H: bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File opened (read-only) \??\N: bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File opened (read-only) \??\S: bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File opened (read-only) \??\B: bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File opened (read-only) \??\I: bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File opened (read-only) \??\J: bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File opened (read-only) \??\Z: bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File opened (read-only) \??\G: bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe -
Drops file in System32 directory 12 IoCs
description ioc Process File created C:\Windows\SysWOW64\IME\SHARED\tyrkish animal lingerie public .rar.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\danish animal horse catfight (Tatjana).mpg.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\american cum beast girls (Curtney).zip.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\System32\DriverStore\Temp\russian horse lesbian sleeping glans .avi.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\american action lesbian licking hole femdom .zip.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\beast big (Melissa).mpg.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\japanese fetish gay voyeur blondie .mpeg.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\indian beastiality hardcore girls titts lady (Melissa).mpg.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\sperm public titts (Kathrin,Jade).avi.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\horse girls .mpeg.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\sperm sleeping .mpeg.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\System32\LogFiles\Fax\Incoming\indian kicking sperm licking feet .rar.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe -
Drops file in Program Files directory 18 IoCs
description ioc Process File created C:\Program Files\Common Files\microsoft shared\beast [milf] cock mistress (Liz).avi.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\Templates\american cumshot lesbian masturbation titts YEâPSè& (Tatjana).mpg.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft SQL Server\130\Shared\trambling catfight feet wifey .mpeg.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\PrintAndShare\japanese action trambling voyeur young .mpg.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Temp\tyrkish handjob gay uncut latex .zip.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\Temp\bukkake [bangbus] titts .zip.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\american gang bang blowjob masturbation hole latex .zip.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\Updates\Download\blowjob voyeur hole .zip.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\italian fetish blowjob voyeur glans swallow (Melissa).zip.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\italian cum bukkake hidden titts sm .zip.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\danish action fucking lesbian feet .mpeg.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Program Files\dotnet\shared\indian nude lingerie big (Melissa).mpg.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\cumshot sperm full movie glans latex .mpg.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\trambling masturbation feet 40+ (Samantha).avi.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft SQL Server\130\Shared\beast sleeping gorgeoushorny .mpeg.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\Microsoft Shared\brasilian fetish horse public (Janette).rar.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Update\Download\black action hardcore hot (!) feet bedroom .zip.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\Download\trambling licking feet (Sandy,Jade).avi.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_en-us_5af076e0a3cb0fa7\indian horse hardcore hot (!) YEâPSè& .rar.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_10.0.19041.906_none_ef0e010d1381269b\animal lingerie several models .rar.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.1_none_2fe79eae2833b9b1\british fucking uncut gorgeoushorny .mpg.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.844_none_57eddd48e7a74274\american gang bang bukkake [milf] sweet .zip.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\inclusiveOobe\view\templates\swedish beastiality beast [milf] bedroom .rar.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-manager-shared_31bf3856ad364e35_10.0.19041.153_none_e23c926e32d07dc1\spanish lingerie catfight high heels .mpeg.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_10.0.19041.1_none_c6da8048542fddc7\handjob blowjob girls (Curtney).avi.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.928_none_33e0d5558cdd7c61\asian lingerie public upskirt (Sandy,Karin).mpg.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost_31bf3856ad364e35_10.0.19041.1202_none_621728fcd3c9d5f6\fetish gay [free] wifey .avi.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\security\templates\indian beastiality beast sleeping (Sylvia).zip.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-service-shared_31bf3856ad364e35_10.0.19041.1_none_3cfd44d351b1a8ab\spanish lesbian big glans .zip.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-ime-eashared-ccshared_31bf3856ad364e35_10.0.19041.1_none_8c0b126c198fcf70\beastiality trambling full movie boots .rar.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\mssrv.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..se-shared-datafiles_31bf3856ad364e35_10.0.19041.1_none_2f5f00d280dce9f6\german lesbian sleeping mistress .zip.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.1_none_9aa486d790131d4e\beast masturbation ash .mpg.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_10.0.19041.1_none_a7ad1894592cfa12\british sperm big shoes .zip.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..nearshareexperience_31bf3856ad364e35_10.0.19041.1288_none_ca3007304990b2ea\brasilian cumshot lingerie catfight wifey .mpeg.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor\xxx licking latex .zip.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-b..-bcdtemplate-client_31bf3856ad364e35_10.0.19041.1_none_de1581e9a275faf8\horse horse public glans balls (Sarah).mpg.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\brasilian horse fucking uncut shower .avi.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Templates\gay girls .mpeg.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.1_none_0bc0f3d4cd7dc8fd\american action trambling full movie wifey (Ashley,Sylvia).rar.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_d38ece58f77171b4\porn beast [milf] redhair .mpeg.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_89c0bf1761110f07\british lesbian hot (!) stockings .zip.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_en-us_215194e2327a46ac\norwegian beast [free] titts .avi.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\swedish nude bukkake full movie cock femdom .mpeg.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.UI.ShellCommon\SharePickerUI\danish porn hardcore voyeur feet balls .rar.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_es-es_30d7585a049f5b52\french bukkake public (Tatjana).mpeg.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.746_none_d01527cffa9c25bc\american nude blowjob public bondage .avi.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_10.0.19041.1_none_f07d4fae3e8e883f\xxx full movie .avi.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-h..public-utils-shared_31bf3856ad364e35_10.0.19041.1202_none_d8a1416ab7cccdcf\american porn bukkake [milf] glans (Christine,Melissa).mpg.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor\japanese fetish hardcore [bangbus] feet young (Curtney).rar.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_de-de_881b257d159a5de8\asian blowjob [bangbus] .avi.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared_31bf3856ad364e35_10.0.19041.1_none_bd731e5b85dd203e\danish horse lingerie [bangbus] glans lady (Curtney).rar.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\fucking uncut sm .zip.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_it-it_bdb6c49fcea35732\american kicking trambling sleeping (Tatjana).zip.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_62312bfbb33d478a\asian fucking uncut hole pregnant .zip.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Templates\black nude horse hot (!) glans upskirt .zip.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..ore-shareexperience_31bf3856ad364e35_10.0.19041.964_none_1c1a193f5bfcf136\tyrkish cumshot gay uncut glans blondie (Jade).mpeg.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\assembly\tmp\beast catfight lady .mpg.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor.Resources\italian fetish horse hidden mistress .zip.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-mccs-engineshared_31bf3856ad364e35_10.0.19041.1_none_abfc9db6c377b91f\swedish fetish hardcore full movie feet swallow (Liz).avi.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_it-it_e79b400a6df5fd2c\gay [milf] (Melissa).mpeg.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\CbsTemp\fucking hot (!) hole .mpeg.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\templates\lesbian [milf] feet .zip.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.1_none_833abdc06c68d338\sperm licking feet (Sonja,Melissa).mpeg.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.746_none_ab42fb092bda9182\handjob fucking sleeping hole ejaculation .mpeg.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_it-it_4c5922428a6f2d08\malaysia xxx hidden (Tatjana).mpeg.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\Downloads\japanese kicking sperm catfight hole penetration .mpg.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-service-shared_31bf3856ad364e35_10.0.19041.1151_none_fbdc4c5f677dc2ec\gay big cock traffic .mpg.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_fd7349c396c417ae\beast lesbian leather .avi.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_it-it_adfc5e0bfca53431\lingerie masturbation 50+ .zip.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.867_en-us_49453482f1fb5356\norwegian fucking full movie redhair .mpeg.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-composable-sharepicker_31bf3856ad364e35_10.0.19041.1_none_c87e96327faffd0e\malaysia horse catfight .rar.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_uk-ua_5b152a8d329397ec\asian horse lesbian (Sarah).avi.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.746_none_2212358fc33cc10f\tyrkish beastiality lesbian lesbian .mpg.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_c3d467c525734eb3\danish gang bang trambling [bangbus] leather .avi.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_en-us_bfae5918c0443f83\bukkake public cock circumcision .mpeg.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..ore-shareexperience_31bf3856ad364e35_10.0.19041.1_none_f42978969c79336a\handjob lesbian full movie glans .avi.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-m..ineshared.resources_31bf3856ad364e35_10.0.19041.1_en-us_99ddc8ce8d3d6dac\japanese cum bukkake big wifey .rar.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_en-us_310bfb76047869ad\malaysia xxx hot (!) .mpg.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_de-de_16bd831fd16633be\african gay uncut titts .mpg.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_es-es_5abbd3c4a3f2014c\danish animal blowjob lesbian titts .rar.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_es-es_211cf1c632a13851\brasilian handjob sperm several models cock .avi.exe bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2596 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 2596 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 544 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 544 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 2596 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 2596 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 4076 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 4076 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 1060 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 1060 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 2596 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 544 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 2596 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 544 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 1712 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 1712 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 3060 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 3060 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 3936 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 3936 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 2596 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 2596 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 3696 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 3696 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 544 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 544 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 4076 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 4076 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 1060 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 1060 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 2428 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 2428 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 2272 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 2272 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 1712 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 1712 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 2596 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 2596 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 372 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 372 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 628 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 4028 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 628 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 4028 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 1060 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 1060 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 4076 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 4076 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 544 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 544 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 1828 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 1828 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 3060 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 3060 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 2920 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 2920 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 3732 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 3732 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 3696 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 3696 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 3936 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 3936 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 808 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 808 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 2596 wrote to memory of 544 2596 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 87 PID 2596 wrote to memory of 544 2596 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 87 PID 2596 wrote to memory of 544 2596 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 87 PID 2596 wrote to memory of 4076 2596 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 90 PID 2596 wrote to memory of 4076 2596 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 90 PID 2596 wrote to memory of 4076 2596 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 90 PID 544 wrote to memory of 1060 544 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 91 PID 544 wrote to memory of 1060 544 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 91 PID 544 wrote to memory of 1060 544 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 91 PID 2596 wrote to memory of 1712 2596 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 96 PID 2596 wrote to memory of 1712 2596 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 96 PID 2596 wrote to memory of 1712 2596 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 96 PID 544 wrote to memory of 3060 544 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 98 PID 544 wrote to memory of 3060 544 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 98 PID 544 wrote to memory of 3060 544 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 98 PID 4076 wrote to memory of 3936 4076 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 97 PID 4076 wrote to memory of 3936 4076 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 97 PID 4076 wrote to memory of 3936 4076 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 97 PID 1060 wrote to memory of 3696 1060 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 99 PID 1060 wrote to memory of 3696 1060 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 99 PID 1060 wrote to memory of 3696 1060 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 99 PID 2596 wrote to memory of 2428 2596 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 101 PID 2596 wrote to memory of 2428 2596 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 101 PID 2596 wrote to memory of 2428 2596 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 101 PID 1712 wrote to memory of 2272 1712 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 102 PID 1712 wrote to memory of 2272 1712 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 102 PID 1712 wrote to memory of 2272 1712 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 102 PID 1060 wrote to memory of 628 1060 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 105 PID 1060 wrote to memory of 628 1060 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 105 PID 1060 wrote to memory of 628 1060 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 105 PID 4076 wrote to memory of 372 4076 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 104 PID 4076 wrote to memory of 372 4076 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 104 PID 4076 wrote to memory of 372 4076 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 104 PID 544 wrote to memory of 4028 544 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 103 PID 544 wrote to memory of 4028 544 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 103 PID 544 wrote to memory of 4028 544 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 103 PID 3060 wrote to memory of 1828 3060 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 106 PID 3060 wrote to memory of 1828 3060 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 106 PID 3060 wrote to memory of 1828 3060 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 106 PID 3696 wrote to memory of 2920 3696 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 107 PID 3696 wrote to memory of 2920 3696 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 107 PID 3696 wrote to memory of 2920 3696 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 107 PID 3936 wrote to memory of 3732 3936 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 108 PID 3936 wrote to memory of 3732 3936 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 108 PID 3936 wrote to memory of 3732 3936 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 108 PID 2596 wrote to memory of 808 2596 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 109 PID 2596 wrote to memory of 808 2596 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 109 PID 2596 wrote to memory of 808 2596 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 109 PID 1712 wrote to memory of 1464 1712 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 110 PID 1712 wrote to memory of 1464 1712 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 110 PID 1712 wrote to memory of 1464 1712 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 110 PID 1060 wrote to memory of 2212 1060 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 112 PID 1060 wrote to memory of 2212 1060 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 112 PID 1060 wrote to memory of 2212 1060 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 112 PID 3060 wrote to memory of 4316 3060 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 115 PID 3060 wrote to memory of 4316 3060 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 115 PID 3060 wrote to memory of 4316 3060 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 115 PID 544 wrote to memory of 4492 544 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 114 PID 544 wrote to memory of 4492 544 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 114 PID 544 wrote to memory of 4492 544 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 114 PID 2272 wrote to memory of 2832 2272 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 116 PID 2272 wrote to memory of 2832 2272 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 116 PID 2272 wrote to memory of 2832 2272 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 116 PID 4076 wrote to memory of 4396 4076 bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe 113
Processes
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"1⤵
- Checks computer location settings
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2596 -
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:544 -
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1060 -
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3696 -
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:2920 -
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:5364
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:6468
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"8⤵PID:14084
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"8⤵PID:19772
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:8184
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"8⤵PID:21352
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:11188
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"8⤵PID:18632
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:12836
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:17696
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:24528
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:5472
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:7608
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"8⤵PID:13600
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"8⤵PID:19752
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:9576
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"8⤵PID:20544
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:13464
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:18760
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:6660
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:13432
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:19020
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:25640
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:8708
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:16804
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:17168
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:13100
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:17868
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:24384
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:4968
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:6280
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:10892
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"8⤵PID:16228
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"8⤵PID:15164
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:12876
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:17572
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:24440
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:7896
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:21204
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:10512
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:4856
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:8212
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:12916
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:17688
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:24236
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:5548
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:7940
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:20576
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:10364
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:2020
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:9796
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:13032
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:17524
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:24180
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:5324
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:14108
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:22008
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:4696
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:16416
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:4920
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:3712
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:17024
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:24464
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:628 -
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:5224
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:6300
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:11160
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"8⤵PID:22992
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:12844
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:17860
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:24376
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:7240
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:21232
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:10336
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:16372
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:9672
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:13060
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:17800
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:24212
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:5496
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:7808
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:16716
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:15044
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:10104
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:16608
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:18180
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:13116
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:17680
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:24128
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:6668
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:13188
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:17556
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:24456
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:8700
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:19992
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:12016
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:12096
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:12748
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:17124
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:4068
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:2212
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:6264
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:11048
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:23828
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:12868
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:16160
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:20672
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:7836
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:16836
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:17172
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:10112
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:18516
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:468
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:13124
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:17632
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:25040
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:5588
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:8088
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:20528
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:10412
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:16532
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:17176
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:12972
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:17428
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:23740
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:7452
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:2216
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:18184
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:24416
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:9552
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:19028
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:14044
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:5204
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3060 -
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:1828 -
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:5236
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:6528
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:1252
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:17976
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:24172
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:7324
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:21240
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:10900
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:16044
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:15160
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:12884
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:19012
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:25632
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:5516
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:7624
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:3564
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:17092
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:1444
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:9544
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:20008
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:2896
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:17636
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:24472
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:6744
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:13584
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:19780
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:8676
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:20492
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:12064
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:12732
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:16144
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:16968
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:4316
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:6520
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:4292
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:17820
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:24220
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:7220
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:20484
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:11200
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:12820
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:17656
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:24244
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:5580
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:8012
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:16432
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:8120
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:10420
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:16272
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:22564
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:12964
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:18496
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:7208
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:14100
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:22012
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:9300
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:21224
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:13500
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:18548
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:25624
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4028 -
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:744
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:6408
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:10664
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:14092
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:19760
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:12892
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:17292
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:14396
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:8268
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:19984
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:11552
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:12788
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:17420
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:23748
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:5532
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:7424
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:13516
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:18740
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:25616
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:9568
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:16524
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:15052
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:14012
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:20508
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:6932
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:14060
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:18532
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:5052
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:9152
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:4032
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:13132
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:17828
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:23760
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"3⤵PID:4492
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:6536
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:9492
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:2952
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:22576
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:13076
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:18556
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:26044
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:6260
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:21188
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:10596
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:16364
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:16124
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:12924
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:16924
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:5144
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"3⤵PID:5564
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:7904
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:16820
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:17720
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:10096
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:18508
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:25484
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:13140
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:17852
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:24136
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"3⤵PID:2012
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:13576
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:18564
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:25608
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"3⤵PID:9288
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:19944
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"3⤵PID:13980
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"3⤵PID:21156
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4076 -
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3936 -
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:3732 -
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:5356
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:6400
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:11280
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:12812
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:17712
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:24400
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:8176
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:21160
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:10520
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:3040
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:13408
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:12932
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:17704
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:24144
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:5480
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:7696
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:13456
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:17968
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:24408
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:10068
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:19920
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:13148
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:17876
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:24424
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:6828
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:11732
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:12772
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:16300
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:23636
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:8544
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:20568
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:12000
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:12724
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:17232
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:17180
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:1668
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:6460
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:13564
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:18572
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:25692
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:7656
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:16736
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:17244
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:11576
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:10564
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:12780
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:17412
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:23732
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:5540
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:7584
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:14052
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:20536
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:9536
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:19912
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:13524
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:19044
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:6840
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:13156
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:18600
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:1920
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:9124
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:19968
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:13108
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:17648
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:24196
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:372 -
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:5216
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:6308
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:10696
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:16828
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"7⤵PID:23340
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:12900
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:18444
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:4180
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:8040
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:20000
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:11076
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:16348
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:13664
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:12860
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:17884
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:24392
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:5508
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:7704
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:16652
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:18208
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:9936
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:19744
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:13556
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:18948
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:7056
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:13424
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:18452
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:2156
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:8520
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:19936
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:13492
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:18524
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:25492
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"3⤵PID:4396
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:6512
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:13092
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:17564
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:24228
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:7232
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:3636
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:11140
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:20552
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:12828
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:17664
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:24260
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"3⤵PID:5556
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:8004
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:17308
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:18000
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:9488
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:16672
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:14880
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:13084
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:18436
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"3⤵PID:6992
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:13624
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:20592
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"3⤵PID:9260
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:19952
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"3⤵PID:13972
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"3⤵PID:21172
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1712 -
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2272 -
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:2832
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:6348
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:13416
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:17956
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:24432
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:8148
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:20560
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:11368
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:12804
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:17844
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:24152
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:5572
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:7952
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:16660
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:18928
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:10324
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:16340
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:13176
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:13052
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:17436
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:23696
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:7092
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:13608
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:19896
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:9308
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:19928
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:13988
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:21992
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"3⤵PID:1464
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:6612
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:11816
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:4072
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:12764
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:16168
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:23620
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:7356
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:20516
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:11376
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:12796
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:16152
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:18100
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"3⤵PID:5596
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:8024
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:21180
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:10348
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:16408
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:164
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:13044
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:17836
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:24252
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"3⤵PID:7256
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:13616
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:19352
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"3⤵PID:9624
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:19960
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"3⤵PID:14028
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"3⤵PID:20500
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:2428 -
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"3⤵PID:3924
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:6556
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:10612
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:16356
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"6⤵PID:7472
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:12908
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:17892
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:24188
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:7344
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:16512
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:16212
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:11056
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:20584
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:12852
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:17672
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:24368
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"3⤵PID:5524
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:7616
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:21212
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:9720
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:16244
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:7784
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:14036
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:5452
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"3⤵PID:6752
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:11848
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:20248
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:12756
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:16136
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:17216
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"3⤵PID:8692
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:19976
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"3⤵PID:12008
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:2276
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"3⤵PID:12740
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"3⤵PID:16488
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"3⤵PID:24204
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
PID:808 -
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"3⤵PID:6272
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:9636
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:3280
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"5⤵PID:7236
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:13068
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:17580
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:24448
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"3⤵PID:8032
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:21196
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"3⤵PID:10380
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:16424
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:13632
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"3⤵PID:14076
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"3⤵PID:18752
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"2⤵PID:5604
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"3⤵PID:8168
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:20600
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"3⤵PID:10392
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:16120
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"4⤵PID:16316
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"3⤵PID:13180
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"3⤵PID:17588
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"3⤵PID:24120
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"2⤵PID:7404
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"3⤵PID:13592
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"3⤵PID:19904
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"2⤵PID:9560
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"3⤵PID:19036
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"2⤵PID:13504
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"2⤵PID:18540
-
-
C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc3bcc56af3f02895991d03c55606860_NeikiAnalytics.exe"2⤵PID:21688
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\trambling masturbation feet 40+ (Samantha).avi.exe
Filesize2.0MB
MD524c7c8ed46091e1713bf729d1cbca977
SHA1953eb335fe8dfa2751546790d619a07ec9ed7e39
SHA256c26229eb953f3a496fe26dfa47c796e086d9eb18ba9df3807651d0d7eee864d8
SHA5123e0e4b4b9d9bf3d537d229b17a90f12713b6fbb28a7fd2a004ee29a229918316e1c7345c99173dfb902bebfa245c9f693624b557a4925f1fde7abc4a7b2ada2a
-
Filesize
146B
MD5e3f5d9358b80eaf0a7becc71c6e6551b
SHA11ba775d4920d8b2df465c3d42fc8ca3898bb6d6c
SHA2567982422e91ac89d0a1f7e65c2d0683cb0fa5beaacd8dd55bcd0226a7d3ac2021
SHA512d4e82f9f1bf692991937be03b20b92b5ad5027d5ba445c649d88515ac07aa38618d4d6f60537fc42ea7e9785526b4d31cf494365f4fb5d2810b86b32f8eafbe3