Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
30s -
max time network
149s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
13/05/2024, 15:06
Behavioral task
behavioral1
Sample
bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe
-
Size
843KB
-
MD5
bc887cfb86d5883e8e3291fb1359ba90
-
SHA1
9e6e187839f81da869f097cb748591228637ee64
-
SHA256
6fef49d2000c547801b280a47e62759db7fc7283c7ff9d0fcfa8b3dbc6f83c39
-
SHA512
60406858daa076f29ee86d01bc9c737241e2496212bb17b70796f9e22c73641bf6bd261840e1d2c6be534da1112c3ccc365830024959e606a9fee50a373f31b7
-
SSDEEP
12288:VEQoSfq+eY4X8p5ushAaMpD8aHIdfQlxzBTf3xW33HQXL+wH7c+ZMqchQgjzEHM:VLJsbpD86IByxzBTf3xuXQX77pXW73Es
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
resource yara_rule behavioral1/memory/2276-0-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/files/0x000700000001431b-5.dat upx behavioral1/memory/2504-71-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2276-69-0x00000000047F0000-0x000000000480E000-memory.dmp upx behavioral1/memory/1172-90-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/3000-92-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2800-94-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2812-95-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2276-97-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2852-98-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2752-100-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1592-99-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2848-102-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2504-101-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/880-107-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1536-106-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/3000-105-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1172-104-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2064-108-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2800-111-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2276-110-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1456-112-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2812-113-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2752-122-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1060-119-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2852-118-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1592-121-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2036-129-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1808-130-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1152-128-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1832-127-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2904-133-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/880-132-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1536-131-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2084-125-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/112-126-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/824-124-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/404-117-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/536-115-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2760-114-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1456-134-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/404-137-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2084-142-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/824-141-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1816-140-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1060-139-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/112-143-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1832-144-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2036-146-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1404-147-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1152-145-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1096-150-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2260-149-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1692-151-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1032-153-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2192-154-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/1816-156-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2592-157-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2920-158-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2164-167-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2632-183-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2576-179-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2948-175-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral1/memory/2112-184-0x0000000000400000-0x000000000041E000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\H: bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File opened (read-only) \??\Q: bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File opened (read-only) \??\U: bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File opened (read-only) \??\X: bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File opened (read-only) \??\E: bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File opened (read-only) \??\G: bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File opened (read-only) \??\M: bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File opened (read-only) \??\R: bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File opened (read-only) \??\T: bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File opened (read-only) \??\W: bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File opened (read-only) \??\A: bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File opened (read-only) \??\K: bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File opened (read-only) \??\N: bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File opened (read-only) \??\O: bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File opened (read-only) \??\P: bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File opened (read-only) \??\V: bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File opened (read-only) \??\Y: bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File opened (read-only) \??\Z: bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File opened (read-only) \??\B: bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File opened (read-only) \??\I: bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File opened (read-only) \??\S: bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File opened (read-only) \??\J: bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File opened (read-only) \??\L: bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe -
Drops file in System32 directory 10 IoCs
description ioc Process File created C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\tyrkish action lesbian several models titts .mpeg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\american cum trambling masturbation feet .mpg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\tyrkish cumshot lingerie lesbian 40+ .zip.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\shared\blowjob full movie titts .rar.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\System32\LogFiles\Fax\Incoming\danish beastiality bukkake uncut hole .rar.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\xxx [bangbus] titts .mpeg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\shared\black kicking trambling lesbian feet shoes .zip.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\blowjob sleeping (Sylvia).rar.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\System32\DriverStore\Temp\danish cumshot sperm several models redhair .rar.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\japanese porn horse [bangbus] penetration .avi.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe -
Drops file in Program Files directory 15 IoCs
description ioc Process File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\blowjob big (Liz).mpeg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Program Files\Common Files\Microsoft Shared\indian cumshot horse [free] .mpeg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Program Files\DVD Maker\Shared\danish fetish sperm licking girly .zip.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\DocumentShare\lingerie [milf] cock (Sonja,Tatjana).rar.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\american kicking gay lesbian .mpg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Temp\russian fetish sperm sleeping traffic .avi.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\lingerie girls cock mistress .mpeg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Update\Download\russian beastiality fucking hot (!) redhair .mpg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\XML Files\Space Templates\horse uncut hole granny .mpg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Office\Templates\american fetish blowjob sleeping mistress (Sonja,Sarah).mpeg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\beast masturbation .avi.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Program Files\Windows Journal\Templates\italian beastiality hardcore full movie .avi.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\IDTemplates\lingerie voyeur hairy .mpeg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\microsoft shared\fucking [milf] glans leather (Curtney).avi.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft Office\Templates\1033\ONENOTE\14\Notebook Templates\swedish fetish beast sleeping cock .mpeg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\winsxs\Temp\tyrkish cum sperm full movie .avi.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_de-de_05ea1d9b8e2bf020\norwegian xxx licking .avi.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-systempropertiesremote_31bf3856ad364e35_6.1.7600.16385_none_94ab98ac6d213009\beast several models upskirt .mpeg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_de-de_bcc167434bb9b3ea\animal gay hidden .rar.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_bacc7ceffc55dca2\swedish beastiality gay [bangbus] traffic .zip.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_netfx-aspnet_installsqlstatetemp_b03f5f7f11d50a3a_6.1.7600.16385_none_16a2bb1dbab1c595\italian nude bukkake several models titts fishy .avi.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\InstallTemp\japanese beastiality sperm masturbation penetration (Christine,Jade).mpg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_6.1.7600.16385_de-de_e30b5ec05031d17d\trambling sleeping sm .zip.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-p2p-pnrp-adm_31bf3856ad364e35_6.1.7600.16385_none_5499606faffb3f9f\gay sleeping .mpg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft.grouppolicy.admtmpleditor_31bf3856ad364e35_6.1.7601.17514_none_dd18b2a07d49aa11\gay uncut titts lady .mpeg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\Downloaded Program Files\swedish cumshot blowjob licking glans 50+ (Melissa).mpg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-systempropertiesremote_31bf3856ad364e35_6.1.7600.16385_none_f0ca3430257ea13f\swedish cum xxx masturbation black hairunshaved (Sonja,Samantha).mpg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft.grouppolicy.admtmpleditor_31bf3856ad364e35_6.1.7601.17514_none_39374e2435a71b47\asian beast sleeping sm .rar.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_6.1.7600.16385_none_3d98a610fed70b75\french beast [milf] hole femdom .rar.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-b..-bcdtemplate-client_31bf3856ad364e35_6.1.7600.16385_none_8419660d1cc97b24\russian fetish bukkake voyeur titts black hairunshaved .mpg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-h..-hmeshare.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_00225053e03f4c04\cum lingerie [free] castration .zip.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-h..-hmeshare.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_8c6fc5a7aa8c435d\trambling uncut hole ejaculation .rar.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_3863e9ef3f804dd9\american kicking bukkake several models glans young .rar.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\swedish handjob trambling masturbation boots .mpeg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_6.1.7601.17514_none_4fe2107fd06efdd8\spanish xxx several models hole .mpg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_de-de_60a2cbbf935c42b4\russian action beast voyeur glans upskirt .zip.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_netfx-shared_netfx_20_mscorlib_b03f5f7f11d50a3a_6.1.7600.16385_none_2958d4a31d2ec64f\animal sperm [free] glans ìï .rar.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\brasilian cum gay catfight cock .mpeg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\Downloads\swedish beastiality beast big titts castration .mpg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_6.1.7600.16385_es-es_8bc7919d3f36cee7\indian fetish horse licking (Samantha).rar.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_it-it_963e6ae24c653bfe\spanish bukkake uncut glans .zip.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-h..-hmeshare.resources_31bf3856ad364e35_6.1.7600.16385_en-us_5d9f7d70ed4643fd\french lesbian big glans .mpg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_netfx-shared_netfx_20_mscorwks_31bf3856ad364e35_6.1.7600.16385_none_dba3691c6002e10e\spanish bukkake girls .mpeg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE291.tmp\lingerie big hole traffic .mpeg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_6.1.7600.16385_none_cd2006602e5ee22e\spanish trambling masturbation (Curtney).zip.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-sharedfoldersui_31bf3856ad364e35_6.1.7600.16385_none_b7f38afb92de484f\action beast [free] redhair .zip.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\danish animal sperm voyeur mature .mpeg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Templates\brasilian cumshot fucking hot (!) glans castration .mpeg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\assembly\GAC_32\Microsoft.SharePoint.BusinessData.Administration.Client\trambling [bangbus] glans stockings .rar.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_6.1.7600.16385_de-de_5803850b2f40840e\british beast hidden (Samantha).mpeg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-vsssystemprovider_31bf3856ad364e35_6.1.7600.16385_none_a727eb798dcfb185\african fucking masturbation .mpg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor\italian handjob lingerie [free] swallow (Christine,Liz).mpg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_8bfc34b93f0fdd42\japanese beastiality bukkake licking bondage .mpeg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-ime-eashared-ccshared_31bf3856ad364e35_6.1.7601.17514_none_34400a5790d1d336\handjob lesbian [milf] cock hairy .avi.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-nfs-shared_31bf3856ad364e35_6.1.7600.16385_none_6377027f0030a06a\black cum xxx sleeping feet beautyfull (Karin).rar.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_6.1.7601.17514_none_3c93ac15fd731acf\african sperm masturbation hole ìï .avi.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_ja-jp_ddab3bcb3a4ffb45\german lingerie hidden latex (Sandy,Sylvia).mpg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\xxx hidden .avi.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\assembly\temp\japanese fetish blowjob lesbian (Melissa).rar.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_es-es_0ac4ebfc358e5ec0\russian cumshot bukkake hidden hole fishy .mpeg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_en-us_0993a1b8823a4e79\spanish lingerie [milf] circumcision .avi.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_6.1.7600.16385_es-es_00bfb7e81e458178\german gay lesbian YEâPSè& .zip.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_es-es_aea650787d30ed8a\gang bang horse licking feet .rar.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\american horse blowjob full movie bedroom .mpg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_it-it_f25d066604c2ad34\trambling sleeping YEâPSè& .rar.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-p..al-securitytemplate_31bf3856ad364e35_6.1.7600.16385_none_49dd84a06c7c8863\norwegian xxx several models cock .mpeg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-sharedaccess_31bf3856ad364e35_6.1.7600.16385_none_60c2504d62fd4f0e\chinese bukkake voyeur feet .rar.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_6.1.7600.16385_none_99b74194b7347cab\porn blowjob full movie cock (Sandy,Curtney).zip.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_0835101f2d90c7b6\trambling full movie latex .rar.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_a3772de7111797da\black gang bang hardcore masturbation traffic .mpeg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-sx-shared_31bf3856ad364e35_6.1.7600.16385_none_387a16fe7addf3b6\danish handjob bukkake catfight penetration .avi.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-sharedaccess.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_515dc677700303ec\sperm licking ash .mpeg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_6.1.7600.16385_en-us_00f45b041e1e8fd3\handjob fucking uncut (Jade).rar.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_2e7f079c3208e549\horse trambling lesbian glans 50+ (Janette).zip.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-d..-ime-eashared-proxy_31bf3856ad364e35_6.1.7600.16385_none_965db382b6fef5cb\porn gay licking (Liz).zip.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\x86_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_fr-fr_ac16749b75335680\malaysia beast catfight .mpeg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\mssrv.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\Downloads\fucking big circumcision .zip.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\winsxs\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_6.1.7600.16385_es-es_657d9a203abeb154\french gay lesbian shower .mpeg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2276 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 2504 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 2276 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 1172 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 3000 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 2504 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 2276 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 2064 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 2800 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 2812 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 1172 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 2760 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 3000 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 2504 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 2276 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 2852 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 1592 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 2752 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 2848 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 2064 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 1808 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 1536 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 880 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 1172 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 2800 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 2904 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 3000 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 2812 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 2504 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 2760 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 2276 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 1456 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 536 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 2852 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 404 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 1060 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 2752 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 1592 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 824 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 2084 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 112 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 2848 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 2064 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 1172 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 1808 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 880 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 1832 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 1152 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 1536 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 2036 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 2800 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 2904 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 2812 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 3000 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 1404 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 2504 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 1096 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 2260 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 1692 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 1032 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 1032 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 2192 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 2192 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 2192 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 2276 wrote to memory of 2504 2276 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 28 PID 2276 wrote to memory of 2504 2276 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 28 PID 2276 wrote to memory of 2504 2276 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 28 PID 2276 wrote to memory of 2504 2276 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 28 PID 2504 wrote to memory of 1172 2504 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 29 PID 2504 wrote to memory of 1172 2504 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 29 PID 2504 wrote to memory of 1172 2504 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 29 PID 2504 wrote to memory of 1172 2504 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 29 PID 2276 wrote to memory of 3000 2276 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 30 PID 2276 wrote to memory of 3000 2276 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 30 PID 2276 wrote to memory of 3000 2276 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 30 PID 2276 wrote to memory of 3000 2276 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 30 PID 1172 wrote to memory of 2064 1172 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 31 PID 1172 wrote to memory of 2064 1172 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 31 PID 1172 wrote to memory of 2064 1172 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 31 PID 1172 wrote to memory of 2064 1172 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 31 PID 3000 wrote to memory of 2800 3000 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 32 PID 3000 wrote to memory of 2800 3000 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 32 PID 3000 wrote to memory of 2800 3000 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 32 PID 3000 wrote to memory of 2800 3000 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 32 PID 2504 wrote to memory of 2812 2504 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 33 PID 2504 wrote to memory of 2812 2504 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 33 PID 2504 wrote to memory of 2812 2504 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 33 PID 2504 wrote to memory of 2812 2504 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 33 PID 2276 wrote to memory of 2760 2276 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 34 PID 2276 wrote to memory of 2760 2276 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 34 PID 2276 wrote to memory of 2760 2276 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 34 PID 2276 wrote to memory of 2760 2276 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 34 PID 2064 wrote to memory of 2852 2064 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 35 PID 2064 wrote to memory of 2852 2064 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 35 PID 2064 wrote to memory of 2852 2064 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 35 PID 2064 wrote to memory of 2852 2064 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 35 PID 2800 wrote to memory of 1592 2800 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 36 PID 2800 wrote to memory of 1592 2800 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 36 PID 2800 wrote to memory of 1592 2800 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 36 PID 2800 wrote to memory of 1592 2800 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 36 PID 1172 wrote to memory of 2752 1172 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 37 PID 1172 wrote to memory of 2752 1172 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 37 PID 1172 wrote to memory of 2752 1172 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 37 PID 1172 wrote to memory of 2752 1172 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 37 PID 2812 wrote to memory of 2848 2812 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 38 PID 2812 wrote to memory of 2848 2812 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 38 PID 2812 wrote to memory of 2848 2812 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 38 PID 2812 wrote to memory of 2848 2812 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 38 PID 3000 wrote to memory of 1808 3000 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 39 PID 3000 wrote to memory of 1808 3000 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 39 PID 3000 wrote to memory of 1808 3000 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 39 PID 3000 wrote to memory of 1808 3000 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 39 PID 2504 wrote to memory of 1536 2504 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 40 PID 2504 wrote to memory of 1536 2504 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 40 PID 2504 wrote to memory of 1536 2504 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 40 PID 2504 wrote to memory of 1536 2504 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 40 PID 2760 wrote to memory of 880 2760 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 41 PID 2760 wrote to memory of 880 2760 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 41 PID 2760 wrote to memory of 880 2760 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 41 PID 2760 wrote to memory of 880 2760 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 41 PID 2276 wrote to memory of 2904 2276 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 42 PID 2276 wrote to memory of 2904 2276 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 42 PID 2276 wrote to memory of 2904 2276 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 42 PID 2276 wrote to memory of 2904 2276 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 42 PID 2852 wrote to memory of 1456 2852 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 43 PID 2852 wrote to memory of 1456 2852 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 43 PID 2852 wrote to memory of 1456 2852 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 43 PID 2852 wrote to memory of 1456 2852 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 43
Processes
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"1⤵
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2276 -
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2504 -
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1172 -
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2064 -
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2852 -
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵
- Suspicious behavior: EnumeratesProcesses
PID:1456 -
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:1816
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:3400
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"9⤵PID:5584
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"10⤵PID:10696
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"10⤵PID:268
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"9⤵PID:8360
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"9⤵PID:11704
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"9⤵PID:22096
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:4904
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"9⤵PID:9356
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"9⤵PID:13856
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"9⤵PID:22784
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:7448
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"9⤵PID:27612
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:12828
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:3420
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:3484
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:5656
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"9⤵PID:11180
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"9⤵PID:22624
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:8552
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"9⤵PID:24832
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:14564
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:8252
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:4512
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:9396
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:13872
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:9680
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:7644
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:2288
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:12844
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:4724
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:1588
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:3576
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:5792
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"9⤵PID:10896
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"9⤵PID:22808
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:8616
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:14612
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:10880
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:4812
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:9364
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:13248
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:2356
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:7676
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:22712
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:11824
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:22696
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:3596
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:5884
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:11316
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:2212
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:9000
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:19644
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:4508
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:9724
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:22136
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:7660
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:27548
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:12812
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:22648
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
PID:824 -
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:2508
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:4156
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:7392
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"9⤵PID:24760
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:11768
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:23008
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:5612
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:13008
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:12724
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:9912
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:22368
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:3112
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:6680
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:13192
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:22640
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:9024
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:19420
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:5736
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:10932
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:22552
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:8608
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:14580
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:12340
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:2576
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:3436
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:6984
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:14424
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:8632
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:10800
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:21992
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:5708
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:11308
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:3256
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:8760
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:25812
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:13928
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:27572
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:4016
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:5644
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:19612
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:9652
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:22032
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:5460
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:9984
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:22064
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:8124
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:24800
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:13864
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:24544
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:2752 -
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
PID:1060 -
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:2164
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:3680
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:5968
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"9⤵PID:13064
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"9⤵PID:22908
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:9068
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:19580
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:4808
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:9904
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:22000
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:7760
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:4616
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:12852
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:22720
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:3772
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:6052
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:11416
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:336
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:9076
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:24792
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:19572
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:5172
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:9880
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:22056
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:7772
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:19468
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:11776
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:22480
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:2672
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:3744
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:6008
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:13088
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:24664
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:9060
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:19388
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:5128
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:9888
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:22048
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:7832
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:24672
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:11792
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:22272
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:3900
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:5936
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:12820
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:23324
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:9636
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:19436
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:5292
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:10472
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:19060
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:8068
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:10892
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:12916
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:22736
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:2084 -
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:2708
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:4620
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:8204
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:22940
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:13880
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:22632
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:6852
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:19596
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:10196
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:12792
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:23048
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:3120
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:6972
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:19636
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:10180
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:13380
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:23040
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:5728
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:11196
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:23032
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:8592
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:14572
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:9148
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:2112
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:4328
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:7944
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:19084
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:13280
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:10876
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:6152
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:13128
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:22560
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:9644
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:19516
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:3988
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:5472
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:13136
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:22664
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:9588
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:22168
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:5348
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:10456
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:19052
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:7988
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:19668
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:13104
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:22832
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2812 -
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:2848 -
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
PID:404 -
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:2552
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:3660
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:5928
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"9⤵PID:10916
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"9⤵PID:22728
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:8652
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"9⤵PID:24736
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:14596
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:11712
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:4788
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:10008
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:13404
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:24640
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:8028
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:13240
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:9376
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:3804
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:6036
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:11288
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:22816
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:9044
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:19412
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:5164
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:9932
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:22472
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:7716
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:1064
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:11844
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:22112
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:2592
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:3892
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:6064
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:13048
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:12324
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:9580
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:22160
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:5308
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:9960
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:22008
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:8036
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:11876
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:13272
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:23056
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:3940
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:5192
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:14396
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:27524
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:9872
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:13332
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:11272
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:5336
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:9992
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:19368
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:8048
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:13096
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:15244
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:1692 -
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:3164
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:4564
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:9692
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:13316
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:23084
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:7436
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:22880
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:11784
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:748
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:4528
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:8224
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:24824
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:13904
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:12472
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:6628
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:13952
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:12388
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:9016
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:19396
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:2632
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:4360
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:7928
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:25820
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:13032
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:23000
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:6164
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:14388
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:27540
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:9596
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:13288
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:7980
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:4088
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:6508
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:14432
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:8272
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:9212
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:22152
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:5748
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:11172
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:27560
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:22576
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:8624
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:24744
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:14620
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:12380
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:1536 -
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:1832 -
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:2580
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:4172
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:7424
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:24840
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:12860
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:22768
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:5620
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:13040
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:4320
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:9604
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:13340
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:10624
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:3604
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:7052
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:13960
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:8644
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:10056
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:15052
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:10856
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:6116
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:12980
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:2200
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:9240
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:13264
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:9948
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:2436
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:4672
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:8320
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:11688
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:22992
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:6436
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:19708
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:11664
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:22864
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:3792
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:6940
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:19684
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:10204
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:13348
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:23296
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:5300
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:13000
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:22744
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:9232
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:13152
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:9976
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:1096 -
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:3216
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:4580
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:9132
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:24816
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:19500
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:7408
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:22964
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:11752
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:22916
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:4520
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:8080
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:24680
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:14180
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:26940
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:6604
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:14364
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:9084
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:19660
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:2412
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:4704
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:6912
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:19588
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:10040
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:14716
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:12284
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:6444
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:19108
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:11696
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:2824
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:3676
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:6616
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:19376
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:11624
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:22520
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:5668
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:10632
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:22288
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:8784
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:13968
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:27620
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3000 -
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2800 -
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:1592 -
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
PID:536 -
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:2920
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:3472
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:5632
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"9⤵PID:10616
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"9⤵PID:22296
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:8384
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:11640
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:22584
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:4392
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:10224
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:13368
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:23316
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:7460
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:22948
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:11744
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:22600
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:3540
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:5700
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:10924
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"9⤵PID:21900
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:4736
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:8744
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:21348
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:14160
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:26896
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:4784
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:9612
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:13356
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:23340
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:7684
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:13412
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:27604
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:11760
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:3068
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:2660
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:3840
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:6072
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:13168
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:3740
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:9264
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:19820
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:5180
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:9896
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:22104
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:7732
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:27588
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:13024
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:4680
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:3712
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:7188
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:19604
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:10808
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:4204
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:5684
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:11300
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:3460
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:8752
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:13936
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:24728
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:1152 -
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:2532
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:4148
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:7336
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:1656
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:11804
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:22840
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:5600
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:13072
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:22924
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:8868
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:19476
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:3588
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:7048
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:19508
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:10840
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:22592
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:6100
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:11832
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:22872
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:9204
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:24720
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:22184
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:1704
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:4744
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:6896
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:14440
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:14136
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:10092
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:19404
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:6484
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:19556
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:10824
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:22120
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:3752
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:7028
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:19312
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:10084
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:14668
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:11980
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:6124
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:13200
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:22956
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:8860
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:24808
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:22176
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:1808 -
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:2036 -
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:1900
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:4792
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:6960
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:14456
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:12292
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:10188
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:13324
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:9832
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:6828
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:19076
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:11616
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:22824
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:3624
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:7204
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:22040
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:10848
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:1228
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:6140
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:13056
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:4024
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:9248
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:24920
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:22128
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:2696
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:4140
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:7328
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:22752
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:11728
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:22608
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:5372
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:12836
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:11188
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:9224
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:24752
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:13896
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:22760
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:3884
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:5944
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:12972
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:22792
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:9628
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:19524
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:5284
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:9952
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:22080
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:7916
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:27596
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:12804
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:22856
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:1404 -
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:3292
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:4776
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:9672
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:14448
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:9152
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:13304
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:23348
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:7472
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:19092
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:12796
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:23332
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:4548
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:8296
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:14380
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:26912
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:6640
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:14412
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:27132
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:9092
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:9820
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:19628
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:920
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:4876
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:8736
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:14404
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:26932
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:7076
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:19540
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:11280
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:22848
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:4484
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:8092
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:27580
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:13176
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:22776
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:6416
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:12992
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:22800
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:10212
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:13296
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:2332
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2760 -
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:880 -
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:112 -
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:412
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:4764
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:8244
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:22932
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:13888
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:8212
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:7216
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:9824
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:10816
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:2600
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:3288
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:6400
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:14464
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:24404
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:10832
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:22536
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:5956
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:11812
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:22464
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:9052
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:19428
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:2948
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:4400
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:7952
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:12456
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:13160
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:11412
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:6352
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:13920
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:12476
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:10032
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:14676
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:8316
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:3952
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:6108
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:13080
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:22656
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:9620
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:22016
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:5316
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:10440
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:19068
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:7996
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:27108
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:13112
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:22704
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:1032 -
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:3192
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:4384
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:9920
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:22456
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:7364
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:23016
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:13016
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:3648
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:4572
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:8304
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:11632
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:22616
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:6648
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:13944
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:24780
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:9008
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:19492
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:3096
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:5020
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:9156
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:22024
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:7288
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:19484
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:11680
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:22684
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:4492
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:8120
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:27532
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:14372
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:26904
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:6464
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:14476
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:27628
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:9108
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:23304
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:19564
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
PID:2904 -
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:2260 -
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:308
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:4756
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:8352
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:11648
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:22980
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:6624
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:19652
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:11656
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:22672
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:3144
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:6920
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:19532
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:10048
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:19380
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:5720
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:10908
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:21904
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:22568
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:8600
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:14588
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:11216
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:640
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:4728
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:8336
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:11736
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:22544
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:6480
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:19176
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:10416
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:22072
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:3852
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:7068
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:19676
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:10076
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:14708
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:5196
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:13184
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:10468
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:9256
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:22144
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
PID:2192 -
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:3260
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:4408
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:9120
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:19448
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:7356
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:19020
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:11852
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:22488
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:4556
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:8264
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:22972
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:13912
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:23076
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:6668
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:14176
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:9100
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:19620
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"2⤵PID:3104
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:4856
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:8636
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:14604
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:9660
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:6992
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:23024
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:11672
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:22280
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"2⤵PID:4500
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:7256
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:13120
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:3656
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"2⤵PID:6408
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:13144
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:23308
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"2⤵PID:9032
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:25800
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"2⤵PID:19548
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.0MB
MD5413904e1945e6cab4b544e81bd535691
SHA19dc820a514a8237b74fadafc31fe3e94028bd237
SHA256aa5b2b6c19663520e327962cba323ac086593fa0b43da7b0a8fce52183368620
SHA5129d783b0623459ca33735a59e863e5ca9f8dce0da9e72fb39a92e73226e41fa3d07e19535ccd92b0f17ebd88ffc987b7dcb5e34a891fec66c98f8954488d5dcb8