Analysis
-
max time kernel
149s -
max time network
114s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
13-05-2024 15:06
Behavioral task
behavioral1
Sample
bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe
-
Size
843KB
-
MD5
bc887cfb86d5883e8e3291fb1359ba90
-
SHA1
9e6e187839f81da869f097cb748591228637ee64
-
SHA256
6fef49d2000c547801b280a47e62759db7fc7283c7ff9d0fcfa8b3dbc6f83c39
-
SHA512
60406858daa076f29ee86d01bc9c737241e2496212bb17b70796f9e22c73641bf6bd261840e1d2c6be534da1112c3ccc365830024959e606a9fee50a373f31b7
-
SSDEEP
12288:VEQoSfq+eY4X8p5ushAaMpD8aHIdfQlxzBTf3xW33HQXL+wH7c+ZMqchQgjzEHM:VLJsbpD86IByxzBTf3xuXQX77pXW73Es
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 13 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-3906287020-2915474608-1755617787-1000\Control Panel\International\Geo\Nation bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3906287020-2915474608-1755617787-1000\Control Panel\International\Geo\Nation bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3906287020-2915474608-1755617787-1000\Control Panel\International\Geo\Nation bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3906287020-2915474608-1755617787-1000\Control Panel\International\Geo\Nation bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3906287020-2915474608-1755617787-1000\Control Panel\International\Geo\Nation bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3906287020-2915474608-1755617787-1000\Control Panel\International\Geo\Nation bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3906287020-2915474608-1755617787-1000\Control Panel\International\Geo\Nation bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3906287020-2915474608-1755617787-1000\Control Panel\International\Geo\Nation bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3906287020-2915474608-1755617787-1000\Control Panel\International\Geo\Nation bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3906287020-2915474608-1755617787-1000\Control Panel\International\Geo\Nation bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3906287020-2915474608-1755617787-1000\Control Panel\International\Geo\Nation bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3906287020-2915474608-1755617787-1000\Control Panel\International\Geo\Nation bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3906287020-2915474608-1755617787-1000\Control Panel\International\Geo\Nation bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
resource yara_rule behavioral2/memory/1492-0-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/files/0x0007000000023409-5.dat upx behavioral2/memory/2896-57-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1956-154-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/8-181-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1092-182-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3504-183-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1612-185-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1492-184-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5012-186-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1492-187-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1704-189-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1956-188-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3584-190-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/8-191-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1160-194-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4980-193-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4064-192-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4788-196-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1092-195-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4468-199-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1708-198-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2416-197-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2056-202-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3504-201-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4500-200-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2076-203-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5012-208-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1912-209-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5096-207-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2392-206-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3292-205-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1612-204-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5228-212-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5196-211-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5188-210-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3360-216-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5428-218-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5500-229-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5096-228-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2392-227-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5484-226-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1748-225-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1148-224-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2056-223-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1160-219-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5412-222-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4468-221-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/116-220-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1888-217-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/6148-231-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/6184-234-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/6196-236-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/6252-243-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/6276-245-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/6260-244-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5436-242-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5428-241-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5400-240-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5228-233-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5196-232-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1912-230-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/6392-252-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/6300-251-0x0000000000400000-0x000000000041E000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\N: bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File opened (read-only) \??\S: bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File opened (read-only) \??\H: bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File opened (read-only) \??\K: bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File opened (read-only) \??\L: bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File opened (read-only) \??\M: bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File opened (read-only) \??\T: bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File opened (read-only) \??\U: bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File opened (read-only) \??\Y: bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File opened (read-only) \??\B: bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File opened (read-only) \??\E: bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File opened (read-only) \??\G: bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File opened (read-only) \??\Q: bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File opened (read-only) \??\R: bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File opened (read-only) \??\V: bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File opened (read-only) \??\W: bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File opened (read-only) \??\X: bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File opened (read-only) \??\A: bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File opened (read-only) \??\J: bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File opened (read-only) \??\O: bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File opened (read-only) \??\P: bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File opened (read-only) \??\I: bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File opened (read-only) \??\Z: bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe -
Drops file in System32 directory 12 IoCs
description ioc Process File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\spanish animal gay [milf] vagina traffic .mpg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\malaysia beast fucking licking ash sweet .rar.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\System32\DriverStore\Temp\spanish kicking several models feet (Sarah,Samantha).rar.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\danish cum masturbation (Karin,Anniston).mpeg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\american cumshot lesbian public hotel .mpg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\System32\LogFiles\Fax\Incoming\british beastiality horse [bangbus] beautyfull .zip.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\french gang bang beastiality big cock young .avi.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\tyrkish horse action hidden (Sonja).avi.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\asian horse licking (Sarah,Jade).avi.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\brasilian lesbian several models pregnant (Britney).rar.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\japanese horse hidden titts stockings .zip.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\animal big .rar.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe -
Drops file in Program Files directory 18 IoCs
description ioc Process File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft SQL Server\130\Shared\french gang bang beast masturbation boobs (Anniston,Sylvia).mpeg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\fucking several models ash .mpg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Temp\british beastiality masturbation (Sonja,Christine).rar.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Update\Download\gang bang voyeur girly .mpg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\Download\african horse horse lesbian .avi.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Program Files\Common Files\microsoft shared\kicking horse uncut legs ash (Sylvia,Ashley).rar.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\fetish girls hairy (Tatjana).zip.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\Updates\Download\fetish several models black hairunshaved (Ashley).rar.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\italian bukkake [bangbus] (Sonja,Sonja).zip.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\PrintAndShare\black action beastiality catfight latex .mpg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\british trambling handjob public latex (Curtney).zip.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\american action horse [milf] vagina boots .rar.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft SQL Server\130\Shared\british trambling trambling several models .zip.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\Microsoft Shared\lingerie licking mature .avi.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Program Files\dotnet\shared\cumshot big .rar.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\Templates\norwegian bukkake blowjob lesbian stockings (Samantha).zip.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\Temp\german fucking action sleeping lady (Samantha,Sandy).zip.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\tyrkish hardcore sleeping boobs blondie .rar.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\WinSxS\amd64_microsoft-windows-i..ore-shareexperience_31bf3856ad364e35_10.0.19041.964_none_1c1a193f5bfcf136\german lingerie catfight mistress .mpg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.UI.ShellCommon\SharePickerUI\xxx [free] glans mistress .avi.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_es-es_bf79b5fcc06b3128\lingerie cumshot hot (!) gorgeoushorny (Gina,Britney).mpeg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5fdc43acc1be690d\italian hardcore uncut vagina bondage .rar.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost_31bf3856ad364e35_10.0.19041.264_none_cb389cf57d74d691\german gang bang big redhair (Britney).mpeg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.844_none_67b5915b5651dd8a\blowjob blowjob uncut (Gina).mpg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.746_none_2212358fc33cc10f\russian sperm fucking [milf] legs .mpeg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-manager-shared_31bf3856ad364e35_10.0.19041.1266_none_7916f7558927ae23\gang bang girls vagina granny .rar.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-service-shared_31bf3856ad364e35_10.0.19041.1151_none_fbdc4c5f677dc2ec\blowjob licking (Sonja).avi.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_de-de_7860bee9439c3ae7\xxx trambling big leather .avi.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_es-es_211cf1c632a13851\malaysia nude hot (!) .mpeg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.ShellCommon.SharedResources\brasilian nude [bangbus] granny .avi.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.928_none_33e0d5558cdd7c61\gang bang lingerie hot (!) YEâPSè& (Sandy).mpg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-h..public-utils-shared_31bf3856ad364e35_10.0.19041.1202_none_d8a1416ab7cccdcf\fucking bukkake sleeping cock (Britney).mpeg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\CbsTemp\american horse catfight .mpg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor.Resources\japanese lingerie big nipples penetration .mpeg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_en-us_310bfb76047869ad\russian xxx sperm [free] vagina (Sonja,Sylvia).avi.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_10.0.19041.1_none_f07d4fae3e8e883f\animal voyeur vagina YEâPSè& .avi.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.844_none_57eddd48e7a74274\american fetish licking .mpg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.867_none_c29826784f9429f8\japanese beastiality hot (!) legs YEâPSè& (Gina).zip.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-manager-shared_31bf3856ad364e35_10.0.19041.153_none_e23c926e32d07dc1\tyrkish fetish hidden (Curtney).zip.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_it-it_adfc5e0bfca53431\american gay beast [bangbus] .mpg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.1_none_0bc0f3d4cd7dc8fd\blowjob lesbian bedroom (Sonja,Sonja).zip.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.746_none_ab42fb092bda9182\swedish horse big pregnant .mpeg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..ore-shareexperience_31bf3856ad364e35_10.0.19041.1_none_f42978969c79336a\black porn several models .rar.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\black gay cumshot [free] 40+ .mpg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor\xxx [free] swallow .mpeg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5021dd18efc0460c\russian cumshot girls castration .zip.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-composable-sharepicker_31bf3856ad364e35_10.0.19041.1_none_c87e96327faffd0e\brasilian trambling nude hot (!) cock young .mpg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.1_none_5d54c0aac5c3c12c\lingerie hidden .rar.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.844_none_855aff45853749ef\german lesbian animal full movie .mpg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.1_none_fa09f84703cb02c5\japanese cumshot bukkake girls beautyfull .mpg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..nearshareexperience_31bf3856ad364e35_10.0.19041.1_none_0b596e2a33be7d4c\porn licking .avi.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\assembly\tmp\danish fetish horse public shower (Ashley).mpeg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_en-us_215194e2327a46ac\nude uncut leather .rar.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.1_none_f3b35d713ce0fc7f\indian kicking sleeping titts shoes .mpeg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\Downloaded Program Files\british hardcore voyeur .avi.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_c3d467c525734eb3\black fucking lesbian [bangbus] feet shoes .mpeg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Templates\horse licking bondage (Sylvia).mpeg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\inclusiveOobe\view\templates\swedish horse public .zip.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\templates\trambling catfight vagina beautyfull (Curtney).mpeg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost_31bf3856ad364e35_10.0.19041.1202_none_621728fcd3c9d5f6\horse fetish hot (!) .avi.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.746_none_d01527cffa9c25bc\beast uncut (Tatjana).mpeg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..s-ime-eashared-ihds_31bf3856ad364e35_10.0.19041.1_none_e8996b7d3512363f\fetish several models cock (Sylvia,Liz).avi.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\mssrv.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor.Resources\malaysia hardcore handjob [milf] mature .mpg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_ee7ea14f7d8a3ee3\bukkake [milf] .mpeg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\Downloads\american lesbian voyeur redhair (Samantha).mpg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ces-ime-eashared-lm_31bf3856ad364e35_10.0.19041.1_none_3d0229d17c310f10\swedish cum blowjob big .rar.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.746_none_1bbb9ab9fc52bac9\japanese action [milf] (Gina).rar.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_de-de_16bd831fd16633be\action [free] (Jenna).mpg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-m..ineshared.resources_31bf3856ad364e35_10.0.19041.1_en-us_99ddc8ce8d3d6dac\canadian hardcore xxx full movie .mpeg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\british fetish handjob [free] feet .avi.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\Downloads\british gang bang fetish public (Kathrin,Sandy).zip.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\danish fetish several models blondie .rar.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.867_en-us_49453482f1fb5356\indian lesbian xxx big ash .rar.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-a..gement-uevtemplates_31bf3856ad364e35_10.0.19041.1_none_0d66b54875835a49\tyrkish animal fetish sleeping bedroom .mpg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-ime-eashared-proxy_31bf3856ad364e35_10.0.19041.1_none_4c786ae2f508e6d5\british gang bang [milf] ash .zip.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..se-shared-datafiles_31bf3856ad364e35_10.0.19041.1_none_2f5f00d280dce9f6\danish fucking voyeur .rar.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_en-us_bfae5918c0443f83\horse bukkake big .mpeg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\security\templates\canadian porn catfight ash sweet .zip.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\chinese kicking gang bang voyeur femdom .mpeg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..nearshareexperience_31bf3856ad364e35_10.0.19041.1288_none_ca3007304990b2ea\porn [bangbus] legs .avi.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.1_none_833abdc06c68d338\spanish lesbian porn big ash .mpeg.exe bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 62 IoCs
pid Process 1492 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 1492 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 2896 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 2896 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 1492 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 1492 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 1956 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 1956 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 3584 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 3584 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 2896 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 2896 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 1492 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 1492 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 8 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 8 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 4980 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 4980 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 4064 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 4064 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 2896 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 2896 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 1092 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 1092 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 1956 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 1956 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 1492 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 1492 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 3584 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 3584 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 2416 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 2416 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 8 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 8 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 3504 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 3504 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 1708 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 1708 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 4500 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 4500 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 3584 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 3584 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 1492 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 1492 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 2896 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 2896 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 1956 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 1956 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 2076 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 2076 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 1612 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 1612 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 3292 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 3292 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 4980 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 4980 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 5012 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 5012 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 4064 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 4064 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 1092 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 1092 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 1492 wrote to memory of 2896 1492 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 85 PID 1492 wrote to memory of 2896 1492 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 85 PID 1492 wrote to memory of 2896 1492 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 85 PID 2896 wrote to memory of 1956 2896 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 90 PID 2896 wrote to memory of 1956 2896 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 90 PID 2896 wrote to memory of 1956 2896 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 90 PID 1492 wrote to memory of 3584 1492 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 91 PID 1492 wrote to memory of 3584 1492 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 91 PID 1492 wrote to memory of 3584 1492 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 91 PID 2896 wrote to memory of 8 2896 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 93 PID 2896 wrote to memory of 8 2896 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 93 PID 2896 wrote to memory of 8 2896 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 93 PID 1956 wrote to memory of 4064 1956 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 94 PID 1956 wrote to memory of 4064 1956 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 94 PID 1956 wrote to memory of 4064 1956 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 94 PID 1492 wrote to memory of 4980 1492 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 95 PID 1492 wrote to memory of 4980 1492 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 95 PID 1492 wrote to memory of 4980 1492 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 95 PID 3584 wrote to memory of 1092 3584 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 96 PID 3584 wrote to memory of 1092 3584 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 96 PID 3584 wrote to memory of 1092 3584 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 96 PID 8 wrote to memory of 2416 8 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 99 PID 8 wrote to memory of 2416 8 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 99 PID 8 wrote to memory of 2416 8 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 99 PID 2896 wrote to memory of 1708 2896 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 100 PID 2896 wrote to memory of 1708 2896 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 100 PID 2896 wrote to memory of 1708 2896 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 100 PID 1956 wrote to memory of 4500 1956 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 101 PID 1956 wrote to memory of 4500 1956 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 101 PID 1956 wrote to memory of 4500 1956 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 101 PID 3584 wrote to memory of 3504 3584 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 102 PID 3584 wrote to memory of 3504 3584 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 102 PID 3584 wrote to memory of 3504 3584 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 102 PID 1492 wrote to memory of 2076 1492 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 103 PID 1492 wrote to memory of 2076 1492 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 103 PID 1492 wrote to memory of 2076 1492 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 103 PID 4980 wrote to memory of 1612 4980 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 104 PID 4980 wrote to memory of 1612 4980 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 104 PID 4980 wrote to memory of 1612 4980 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 104 PID 1092 wrote to memory of 3292 1092 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 105 PID 1092 wrote to memory of 3292 1092 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 105 PID 1092 wrote to memory of 3292 1092 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 105 PID 4064 wrote to memory of 5012 4064 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 106 PID 4064 wrote to memory of 5012 4064 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 106 PID 4064 wrote to memory of 5012 4064 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 106 PID 8 wrote to memory of 1704 8 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 107 PID 8 wrote to memory of 1704 8 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 107 PID 8 wrote to memory of 1704 8 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 107 PID 3584 wrote to memory of 1888 3584 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 108 PID 3584 wrote to memory of 1888 3584 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 108 PID 3584 wrote to memory of 1888 3584 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 108 PID 1956 wrote to memory of 3360 1956 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 109 PID 1956 wrote to memory of 3360 1956 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 109 PID 1956 wrote to memory of 3360 1956 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 109 PID 2896 wrote to memory of 1160 2896 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 110 PID 2896 wrote to memory of 1160 2896 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 110 PID 2896 wrote to memory of 1160 2896 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 110 PID 1492 wrote to memory of 4788 1492 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 111 PID 1492 wrote to memory of 4788 1492 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 111 PID 1492 wrote to memory of 4788 1492 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 111 PID 2416 wrote to memory of 116 2416 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 113 PID 2416 wrote to memory of 116 2416 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 113 PID 2416 wrote to memory of 116 2416 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 113 PID 4064 wrote to memory of 4468 4064 bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe 114
Processes
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"1⤵
- Checks computer location settings
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1492 -
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2896 -
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1956 -
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4064 -
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
PID:5012 -
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:5188
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:6148
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:10044
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"9⤵PID:21664
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:11924
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:18624
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:24652
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:7820
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:14244
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:20980
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:9624
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:7196
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:13572
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:19952
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:5400
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:7952
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:16116
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:22704
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:11020
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:21276
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:15848
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:1880
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:6820
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:10960
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:3232
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:17156
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:15828
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:9104
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:19864
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:3160
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:12520
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:17596
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:15080
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:4468
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:6196
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:10248
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:20484
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:14532
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:20520
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:7836
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:15040
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:20996
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:10584
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:6452
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:14180
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:20096
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:5476
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:8512
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:11916
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:22648
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:11736
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:18576
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:16720
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:22580
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:6884
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:12544
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:13660
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:17604
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:23268
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:9200
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:19848
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:8272
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:13032
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:18176
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:8976
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4500 -
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:2392
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:6268
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:10084
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:2144
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:13352
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:19896
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:21116
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:7804
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:16068
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:22688
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:8820
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:21656
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:13436
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:19920
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:25764
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:5452
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:7696
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:13540
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:19992
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:18364
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:10232
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:4480
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:13556
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:19968
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:22456
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:6852
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:12292
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:25640
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:17348
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:16776
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:9112
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:20696
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:12512
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:17540
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:24368
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:3360
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:6184
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:10592
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:4352
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:14144
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:20436
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:7784
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:15720
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:21356
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:9468
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:7420
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:13564
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:20008
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:5508
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:8984
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:17320
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:16336
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:12100
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:16428
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:16848
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:24468
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:6860
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:14968
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:20448
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:9120
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:17504
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:20292
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:12528
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:17760
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:17380
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:8 -
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2416 -
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:116
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:6292
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:10600
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:15220
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:16612
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:22572
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:7872
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:15728
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:21364
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:9452
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:10568
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:14072
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:20212
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:5484
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:8504
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:15364
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:22640
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:11760
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:18520
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:16740
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:14464
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:6868
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:14800
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:20720
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:9128
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:17632
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:4260
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:12592
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:17896
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:24628
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:1704
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:6352
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:10060
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:21576
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:13260
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:18616
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:3488
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:7864
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:15592
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:21028
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:10148
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:21672
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:13580
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:20032
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:5524
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:9788
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:2484
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:13220
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:18668
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:3348
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:6920
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:13396
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:19944
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:9208
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:20688
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:13040
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:18216
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:13844
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:1708 -
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:1748
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:6536
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:8832
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:4592
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:14044
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:20260
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:7896
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:16156
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:22732
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:9988
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:20676
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:12888
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:18144
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:13640
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:5436
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:7316
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:12256
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:12084
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:17140
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:16052
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:6212
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:17636
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:5016
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:12748
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:18192
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:20856
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:7008
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:12284
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:19548
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:17148
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:15884
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:9192
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:20372
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:12872
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:18256
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:20784
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:1160
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:6252
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:7192
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:20828
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:13404
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:19984
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:7852
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:15808
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:22672
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:10460
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:6500
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:14064
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:20252
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:5492
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:7940
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:16012
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:412
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:10912
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:6596
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:15600
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:21104
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:6844
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:12248
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:12144
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:17164
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:15652
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:9300
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:19788
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:3248
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:13108
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:18276
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:13856
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3584 -
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1092 -
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:3292 -
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:1912
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:6300
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:10100
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:21568
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:13336
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:19888
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:4404
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:7812
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:14236
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:20988
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:10448
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:6308
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:14052
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:20268
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:5428
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:6948
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:12168
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"8⤵PID:18524
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:17020
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:24460
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:9168
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:17616
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:12240
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:12780
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:18184
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:14288
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:6940
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:12380
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:13656
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:17080
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:24356
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:9160
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:19840
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:4716
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:12856
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:18224
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:18744
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:5096
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:6360
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:11284
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:25516
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:16596
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:23404
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:7880
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:15972
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:1416
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:10604
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:6368
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:14020
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:20236
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:5444
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:8360
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:15816
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:22656
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:11164
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:22808
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:16588
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:23248
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:6976
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:12536
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:17644
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:15684
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:9176
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:19724
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:1568
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:12788
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:18232
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:20716
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:3504 -
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:1148
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:6260
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:10092
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:2072
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:13412
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:19936
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:7912
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:16076
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:3128
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:9676
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:21680
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:13520
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:19976
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:5460
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:7932
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:16312
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:22616
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:10684
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:6336
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:14208
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:19632
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:7060
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:12492
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:17548
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:24420
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:9564
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:19856
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:24564
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:13132
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:18608
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:7340
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:1888
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:6372
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:10876
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:6236
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:14256
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:20972
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:7924
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:16084
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:22680
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:11032
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:11280
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:15876
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:8320
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:5516
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:9572
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:20820
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:12880
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:18200
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:20780
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:6904
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:12356
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:12340
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:17340
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:16772
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:9152
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:17624
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:4544
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:12756
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:18208
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:13872
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4980 -
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:1612 -
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:5228
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:6276
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:10068
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"7⤵PID:3384
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:4612
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:18904
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:5888
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:7844
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:15984
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:4144
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:10268
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:6408
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:14028
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:20228
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:5392
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:8608
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:15892
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:22712
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:11788
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:12064
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:16792
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:23560
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:6876
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:12388
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:17312
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:24352
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:9136
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:16944
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:2816
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:12948
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:18152
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:20572
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:2056
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:6284
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:10344
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:4016
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:14036
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:20512
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:7828
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:16100
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:22696
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:9484
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:21788
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:13344
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:19904
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:22256
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:5468
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:7436
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:15800
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:22664
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:10396
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:8768
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:16580
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:24276
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:6912
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:12264
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:19692
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:17236
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:16236
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:8564
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:19772
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:10080
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:12800
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:18164
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:20860
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
PID:2076 -
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:5196
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:6392
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:10612
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"6⤵PID:21268
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:14080
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:20244
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:7888
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:16092
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:22624
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:9796
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:20380
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:13512
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:19960
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:5412
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:7688
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:14520
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:21004
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:9772
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:20704
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:13200
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:18548
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:19128
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:6836
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:13548
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:19928
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:9184
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:5020
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:4984
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:12764
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:18248
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:20648
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"2⤵PID:4788
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:6400
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:9612
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"5⤵PID:21688
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:14188
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:19624
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:7904
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:15564
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:21020
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:10440
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:2408
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:14012
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:20220
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"2⤵PID:5500
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:8204
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:16228
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:22632
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:10628
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:2600
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:16604
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:23272
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"2⤵PID:6896
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:12276
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"4⤵PID:11900
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:17132
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:15668
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"2⤵PID:8172
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:19832
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"3⤵PID:10000
-
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"2⤵PID:12772
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"2⤵PID:18240
-
-
C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bc887cfb86d5883e8e3291fb1359ba90_NeikiAnalytics.exe"2⤵PID:20804
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\fetish girls hairy (Tatjana).zip.exe
Filesize1.1MB
MD59c0662740baf14c2cb5f98ea584b36c2
SHA1d6889965a4bb411b3aea2fcdd1d940db0fd26476
SHA256ef70b4063a86144d153d0f145a8909a4d5b9b1cd918a9df42b48ce11a3fcf336
SHA5128e4575187a5b0df76e637b78469106d9b922319fac1534bcf17fe64610115483c9eaad2e438a17f2e97f593299655d4f06039d39f7f9011df49b62895ab39ee3