Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
16s -
max time network
136s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
10/05/2024, 21:49
Behavioral task
behavioral1
Sample
103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe
-
Size
2.0MB
-
MD5
103e76fde9cae0ddd9c130f04ddc91e0
-
SHA1
8d912d99df0e97be05242aaa69002903b9206ee8
-
SHA256
9dfd129af3eb9d1d2fd7d57369053c11c64ed36c5888e6bb3026b3ad978a89a8
-
SHA512
8613c1ea3b97dba1f46d69af30c4cba4f89f86c178d3d4aff26c671b3c2d14ae1767064ae892daefdb7cd54ab44d09d013b65456062de0fff81aca3db3bda1b1
-
SSDEEP
49152:mAph0Q1M8h3GztIvs5hWy3zqy1OCiQFcJFvHZSM8IrijcX:muLNQziE5hWEz3OCiQFoHZ+IGjcX
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 16 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
resource yara_rule behavioral2/memory/1900-0-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/files/0x00070000000233fa-5.dat upx behavioral2/memory/2016-54-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4192-154-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1904-155-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1000-179-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4444-180-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1756-181-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3204-182-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1600-183-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1900-184-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2192-186-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2016-185-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4936-187-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/348-189-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5004-190-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/628-196-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1376-195-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1756-194-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4444-193-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4576-192-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1000-191-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1900-188-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4292-197-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3928-198-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2884-201-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4912-200-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/972-202-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4988-199-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2192-203-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/440-204-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1808-205-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3848-206-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3256-210-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1404-209-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4576-208-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5004-207-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4260-211-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/628-216-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3756-215-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2288-226-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4152-225-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4592-224-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1232-223-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3928-222-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4292-221-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1052-220-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4008-219-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4340-218-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3436-217-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5432-233-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2884-232-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4912-231-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/964-234-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/440-235-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3828-237-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3848-236-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5616-239-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1404-238-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3640-253-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5800-252-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1912-250-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2312-249-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1052-248-0x0000000000400000-0x000000000041E000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\A: 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File opened (read-only) \??\H: 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File opened (read-only) \??\K: 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File opened (read-only) \??\L: 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File opened (read-only) \??\N: 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File opened (read-only) \??\V: 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File opened (read-only) \??\W: 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File opened (read-only) \??\E: 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File opened (read-only) \??\G: 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File opened (read-only) \??\Q: 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File opened (read-only) \??\S: 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File opened (read-only) \??\X: 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File opened (read-only) \??\B: 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File opened (read-only) \??\I: 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File opened (read-only) \??\P: 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File opened (read-only) \??\R: 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File opened (read-only) \??\T: 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File opened (read-only) \??\U: 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File opened (read-only) \??\Z: 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File opened (read-only) \??\J: 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File opened (read-only) \??\M: 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File opened (read-only) \??\O: 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File opened (read-only) \??\Y: 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe -
Drops file in System32 directory 12 IoCs
description ioc Process File created C:\Windows\System32\DriverStore\Temp\russian beast beast hidden boobs .zip.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\asian action girls stockings .mpg.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\System32\LogFiles\Fax\Incoming\tyrkish animal [milf] .mpg.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\indian animal kicking hidden .mpeg.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\russian horse trambling catfight boobs hairy .mpg.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\porn trambling uncut (Ashley,Tatjana).avi.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\asian horse cumshot hot (!) titts balls .avi.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\malaysia hardcore big feet YEâPSè& .avi.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\xxx kicking uncut boobs boots .mpg.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\cum big tß .zip.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\italian action beastiality sleeping feet .mpeg.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\trambling several models hotel .zip.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe -
Drops file in Program Files directory 17 IoCs
description ioc Process File created C:\Program Files\Common Files\microsoft shared\norwegian horse cumshot several models ash (Sylvia).zip.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\action porn voyeur .zip.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\Microsoft Shared\fucking several models .mpeg.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\Download\canadian sperm fetish public (Christine).mpeg.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Program Files\dotnet\shared\danish fucking public .mpeg.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\Templates\chinese lingerie [free] feet gorgeoushorny .avi.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\spanish lesbian handjob uncut latex .avi.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\PrintAndShare\french porn lesbian .rar.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Temp\sperm animal licking glans hotel (Jade).mpeg.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\italian bukkake gay hot (!) shoes (Jade).mpg.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\trambling voyeur (Sarah).mpg.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\malaysia fetish sleeping feet .mpg.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft SQL Server\130\Shared\canadian blowjob big pregnant .zip.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft SQL Server\130\Shared\spanish beast handjob lesbian titts shower .avi.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\Updates\Download\lesbian cum public .mpeg.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\animal lesbian nipples .mpg.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Update\Download\indian bukkake [milf] gorgeoushorny .mpg.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.844_none_57eddd48e7a74274\porn bukkake catfight .rar.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.746_none_2212358fc33cc10f\horse fetish masturbation shoes .avi.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\gang bang masturbation feet 40+ .mpg.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_en-us_310bfb76047869ad\beast [free] sweet .mpeg.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..se-shared-datafiles_31bf3856ad364e35_10.0.19041.1_none_2f5f00d280dce9f6\american fetish voyeur leather .rar.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_es-es_bf79b5fcc06b3128\chinese beastiality girls beautyfull .mpeg.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor.Resources\japanese cumshot full movie bondage .mpg.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\Downloads\russian horse uncut upskirt (Curtney,Sonja).mpeg.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_fd7349c396c417ae\indian fetish horse voyeur latex .zip.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_es-es_211cf1c632a13851\action beastiality sleeping legs swallow .mpeg.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.844_none_855aff45853749ef\american nude action big (Liz,Samantha).zip.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5021dd18efc0460c\indian gay hidden femdom (Sonja).mpg.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_en-us_5af076e0a3cb0fa7\fucking bukkake hot (!) ash gorgeoushorny (Jenna).rar.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\security\templates\canadian porn voyeur legs .zip.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_en-us_bfae5918c0443f83\beastiality fucking [bangbus] shower (Sonja,Anniston).avi.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..ore-shareexperience_31bf3856ad364e35_10.0.19041.964_none_1c1a193f5bfcf136\sperm kicking voyeur nipples .mpg.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_89c0bf1761110f07\italian cum gang bang masturbation vagina .zip.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.1_none_9aa486d790131d4e\asian xxx trambling hidden glans YEâPSè& .mpg.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_10.0.19041.572_none_cf90e12518baac85\swedish trambling nude [bangbus] titts 40+ (Jade,Melissa).avi.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.928_none_33e0d5558cdd7c61\british fucking cum masturbation cock .mpg.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-h..public-utils-shared_31bf3856ad364e35_10.0.19041.1202_none_d8a1416ab7cccdcf\british handjob gang bang big nipples blondie .mpeg.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_de-de_b1ffa0e7b4ed03e2\russian cumshot kicking sleeping (Gina,Kathrin).mpg.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_en-us_215194e2327a46ac\bukkake animal public vagina (Curtney).avi.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.1_none_0bc0f3d4cd7dc8fd\gang bang several models 40+ .avi.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..s-ime-eashared-ihds_31bf3856ad364e35_10.0.19041.1_none_e8996b7d3512363f\spanish animal cum hidden 40+ .zip.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\SharedFileCache\porn hot (!) hole ¼ë (Britney).zip.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..nearshareexperience_31bf3856ad364e35_10.0.19041.1288_none_ca3007304990b2ea\spanish horse handjob masturbation penetration (Christine,Tatjana).mpg.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor.Resources\gay nude several models .mpeg.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\PLA\Templates\gay bukkake full movie penetration (Jenna).rar.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.UI.ShellCommon\SharePickerUI\black kicking [bangbus] hotel .mpg.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..ore-shareexperience_31bf3856ad364e35_10.0.19041.1_none_f42978969c79336a\hardcore lesbian wifey .mpeg.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_10.0.19041.1_none_c6da8048542fddc7\sperm big .zip.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_10.0.19041.906_none_ef0e010d1381269b\xxx public stockings .rar.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\InputMethod\SHARED\indian blowjob [bangbus] glans .mpeg.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-composable-sharepicker_31bf3856ad364e35_10.0.19041.1_none_c87e96327faffd0e\canadian xxx sleeping glans circumcision (Liz).mpg.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_de-de_881b257d159a5de8\asian horse hardcore hidden titts .mpg.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.1_none_833abdc06c68d338\asian nude gang bang lesbian glans (Gina).mpeg.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.1_none_f3b35d713ce0fc7f\lingerie catfight upskirt (Jenna).zip.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_it-it_e79b400a6df5fd2c\british horse horse [bangbus] hairy .mpg.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\norwegian cumshot beast catfight boobs fishy .avi.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\inclusiveOobe\view\templates\animal hardcore girls young (Britney).mpeg.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.1_none_a80cea873b2a6772\kicking public vagina castration .mpeg.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.1_none_2fe79eae2833b9b1\black cum hidden .mpg.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\Downloaded Program Files\indian kicking gay lesbian vagina swallow (Kathrin).rar.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ces-ime-eashared-lm_31bf3856ad364e35_10.0.19041.1_none_3d0229d17c310f10\action cum licking mature .rar.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_62312bfbb33d478a\canadian sperm cumshot full movie vagina (Samantha,Sonja).rar.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_ee7ea14f7d8a3ee3\british kicking girls girly (Britney,Curtney).rar.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_10.0.19041.1_none_a7ad1894592cfa12\japanese lesbian hidden vagina blondie .rar.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-service-shared_31bf3856ad364e35_10.0.19041.1151_none_fbdc4c5f677dc2ec\malaysia nude sperm big leather .rar.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\tyrkish gay hidden femdom .mpg.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared_31bf3856ad364e35_10.0.19041.1_none_bd731e5b85dd203e\gay nude uncut young .zip.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.ShellCommon.SharedResources\german beastiality cum lesbian blondie .rar.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.867_none_c29826784f9429f8\french trambling beastiality full movie 40+ .avi.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.1_none_fa09f84703cb02c5\spanish xxx hidden young .zip.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-a..gement-uevtemplates_31bf3856ad364e35_10.0.19041.1_none_0d66b54875835a49\horse fucking [bangbus] legs high heels (Tatjana,Sarah).rar.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.746_none_1bbb9ab9fc52bac9\japanese lesbian girls .mpeg.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_de-de_16bd831fd16633be\blowjob public .avi.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost_31bf3856ad364e35_10.0.19041.1202_none_621728fcd3c9d5f6\tyrkish sperm [free] feet .mpeg.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\horse kicking licking vagina (Ashley).zip.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_it-it_adfc5e0bfca53431\kicking voyeur (Tatjana).zip.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_10.0.19041.1_none_f07d4fae3e8e883f\black bukkake public legs beautyfull .zip.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-manager-shared_31bf3856ad364e35_10.0.19041.153_none_e23c926e32d07dc1\british beast bukkake voyeur .avi.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\assembly\temp\malaysia xxx lesbian fishy (Sonja,Britney).zip.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_es-es_30d7585a049f5b52\american beast uncut femdom (Sonja,Sonja).mpeg.exe 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 1900 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 1900 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 2016 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 2016 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 1900 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 1900 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 4192 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 4192 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 1904 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 1904 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 1900 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 1900 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 2016 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 2016 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 4936 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 4936 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 348 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 348 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 1000 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 1000 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 1900 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 1900 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 2016 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 2016 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 4192 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 4192 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 4444 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 4444 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 1904 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 1904 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 1756 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 1756 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 1376 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 1376 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 3204 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 3204 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 1900 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 1900 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 1600 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 1600 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 2016 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 2016 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 4192 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 4192 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 4936 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 4936 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 4988 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 4988 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 972 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 972 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 2192 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 2192 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 1904 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 1904 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 348 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 1000 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 1000 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 348 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 1808 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 1808 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 4444 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 4444 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 5004 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 5004 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 1900 wrote to memory of 2016 1900 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 84 PID 1900 wrote to memory of 2016 1900 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 84 PID 1900 wrote to memory of 2016 1900 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 84 PID 2016 wrote to memory of 4192 2016 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 85 PID 2016 wrote to memory of 4192 2016 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 85 PID 2016 wrote to memory of 4192 2016 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 85 PID 1900 wrote to memory of 1904 1900 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 86 PID 1900 wrote to memory of 1904 1900 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 86 PID 1900 wrote to memory of 1904 1900 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 86 PID 2016 wrote to memory of 4936 2016 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 87 PID 2016 wrote to memory of 4936 2016 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 87 PID 2016 wrote to memory of 4936 2016 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 87 PID 1900 wrote to memory of 348 1900 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 88 PID 1900 wrote to memory of 348 1900 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 88 PID 1900 wrote to memory of 348 1900 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 88 PID 4192 wrote to memory of 1000 4192 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 89 PID 4192 wrote to memory of 1000 4192 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 89 PID 4192 wrote to memory of 1000 4192 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 89 PID 1904 wrote to memory of 4444 1904 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 90 PID 1904 wrote to memory of 4444 1904 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 90 PID 1904 wrote to memory of 4444 1904 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 90 PID 1900 wrote to memory of 1756 1900 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 91 PID 1900 wrote to memory of 1756 1900 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 91 PID 1900 wrote to memory of 1756 1900 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 91 PID 2016 wrote to memory of 1376 2016 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 92 PID 2016 wrote to memory of 1376 2016 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 92 PID 2016 wrote to memory of 1376 2016 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 92 PID 4192 wrote to memory of 3204 4192 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 93 PID 4192 wrote to memory of 3204 4192 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 93 PID 4192 wrote to memory of 3204 4192 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 93 PID 4936 wrote to memory of 1600 4936 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 94 PID 4936 wrote to memory of 1600 4936 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 94 PID 4936 wrote to memory of 1600 4936 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 94 PID 1904 wrote to memory of 4988 1904 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 95 PID 1904 wrote to memory of 4988 1904 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 95 PID 1904 wrote to memory of 4988 1904 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 95 PID 348 wrote to memory of 972 348 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 96 PID 348 wrote to memory of 972 348 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 96 PID 348 wrote to memory of 972 348 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 96 PID 1000 wrote to memory of 2192 1000 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 97 PID 1000 wrote to memory of 2192 1000 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 97 PID 1000 wrote to memory of 2192 1000 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 97 PID 4444 wrote to memory of 1808 4444 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 98 PID 4444 wrote to memory of 1808 4444 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 98 PID 4444 wrote to memory of 1808 4444 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 98 PID 1900 wrote to memory of 5004 1900 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 99 PID 1900 wrote to memory of 5004 1900 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 99 PID 1900 wrote to memory of 5004 1900 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 99 PID 2016 wrote to memory of 4576 2016 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 100 PID 2016 wrote to memory of 4576 2016 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 100 PID 2016 wrote to memory of 4576 2016 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 100 PID 4192 wrote to memory of 3756 4192 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 101 PID 4192 wrote to memory of 3756 4192 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 101 PID 4192 wrote to memory of 3756 4192 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 101 PID 4936 wrote to memory of 628 4936 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 102 PID 4936 wrote to memory of 628 4936 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 102 PID 4936 wrote to memory of 628 4936 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 102 PID 1904 wrote to memory of 4292 1904 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 103 PID 1904 wrote to memory of 4292 1904 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 103 PID 1904 wrote to memory of 4292 1904 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 103 PID 1000 wrote to memory of 3928 1000 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 104 PID 1000 wrote to memory of 3928 1000 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 104 PID 1000 wrote to memory of 3928 1000 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 104 PID 348 wrote to memory of 4912 348 103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe 105
Processes
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"1⤵
- Checks computer location settings
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1900 -
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2016 -
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4192 -
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1000 -
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:2192 -
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:440
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"7⤵PID:5516
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"8⤵PID:9296
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"8⤵PID:12620
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"8⤵PID:3088
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"7⤵PID:6840
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"8⤵PID:12316
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"8⤵PID:5744
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"7⤵PID:9100
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"7⤵PID:12556
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"7⤵PID:17312
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:1052
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"7⤵PID:6868
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"8⤵PID:12348
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"8⤵PID:6784
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"7⤵PID:9124
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"7⤵PID:12564
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"7⤵PID:6168
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:6096
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"7⤵PID:12952
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"7⤵PID:4116
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:7652
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"7⤵PID:16952
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:3248
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:3424
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:3928
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:5824
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"7⤵PID:10820
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"7⤵PID:5044
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"7⤵PID:2060
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:7832
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"7⤵PID:18508
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:11028
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:12296
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:3860
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:3412
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:8052
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"7⤵PID:2112
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:11048
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:3012
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:7100
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:6332
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:12704
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:5840
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:8676
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:2648
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:12468
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:6064
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:3204 -
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:964
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:5584
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"7⤵PID:10496
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"8⤵PID:18036
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"7⤵PID:13320
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"7⤵PID:17288
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:5900
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"7⤵PID:5064
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:9348
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"7⤵PID:5444
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:12588
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:16924
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:2312
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:7228
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"7⤵PID:17448
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:10236
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:13336
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:17304
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:6088
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:12380
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:16916
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:7636
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:3584
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:12324
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:6968
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:3756
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:5616
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:10080
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:13140
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:2044
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:5936
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:18044
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:9576
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:18484
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:12984
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:3384
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:4592
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:7308
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:18020
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:10368
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:8180
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:12292
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:3348
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:6132
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:12412
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:17256
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:8364
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:12404
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:17376
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4936 -
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:1600 -
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:3256
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:5640
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"7⤵PID:9800
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"8⤵PID:18388
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"7⤵PID:12640
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"7⤵PID:2392
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:6524
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"7⤵PID:14308
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:9656
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"7⤵PID:6368
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:12604
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:16940
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:3436
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:6280
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"7⤵PID:18060
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:9560
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:12596
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:6396
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:448
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:12428
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:4944
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:8408
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:12436
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:6704
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:628
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:5676
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:10528
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"7⤵PID:7600
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:852
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:17296
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:6312
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:3544
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:10032
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:18492
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:13132
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:4264
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:3000
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:8008
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:900
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:11168
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:3876
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:17272
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:6140
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:13256
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:4636
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:8344
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:3960
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:6876
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:1376 -
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:1404
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:5500
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:9536
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:13124
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:3580
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:6848
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:12720
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:5856
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:8928
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:12540
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:5564
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:3772
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:7352
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:680
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:10376
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:13328
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:1184
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:5456
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:12396
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:6452
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:8840
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:12492
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:17368
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"3⤵PID:4576
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:5632
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:10072
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:13352
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:4248
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:6308
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:9528
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:8704
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:12976
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:1604
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"3⤵PID:3640
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:7368
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:2348
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:10520
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:18500
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:4536
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:624
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"3⤵PID:6516
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:12332
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:5812
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"3⤵PID:8660
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"3⤵PID:12444
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"3⤵PID:5944
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1904 -
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4444 -
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:1808 -
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:3828
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:5800
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"7⤵PID:10088
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"7⤵PID:13184
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"7⤵PID:2632
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:7680
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:10564
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"7⤵PID:13080
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"7⤵PID:1644
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:12936
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:17352
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:4008
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:7344
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"7⤵PID:2696
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:10056
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"7⤵PID:6028
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:13176
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:3160
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:6080
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:12372
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:1984
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:7808
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:12340
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:5808
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:2884
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:5684
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:10772
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"7⤵PID:18028
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:12692
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:3764
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:7184
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:18524
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:10040
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:3496
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:13148
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:1336
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:2848
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:7848
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:1136
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:10904
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:12304
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:16956
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:6116
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:12524
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:17392
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:8396
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:2624
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:12420
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:4472
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4988 -
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:3848
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:5624
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:10196
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:13344
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:1420
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:5896
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:8640
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:9260
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:6964
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:4456
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:16960
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:4340
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:5928
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:8880
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:4864
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:12572
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:17336
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:6016
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:12648
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:6416
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:8128
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:1444
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:12364
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:17344
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"3⤵PID:4292
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:5424
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:8652
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:12476
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:16948
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:6932
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:4320
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:9132
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:5748
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:12928
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:17328
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"3⤵PID:1080
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:6236
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:18516
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:9568
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:12612
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:2068
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"3⤵PID:1712
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:12484
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:1432
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"3⤵PID:8624
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:5532
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"3⤵PID:12452
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"3⤵PID:17360
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:348 -
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:972 -
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:4260
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:5508
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:9636
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:13116
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:996
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:6832
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:12712
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:5980
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:9108
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:12548
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:6008
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:2288
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:7856
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:1460
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:10912
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:11196
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:6200
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:6504
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:12728
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:5948
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:8884
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:5764
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:12508
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:6152
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"3⤵PID:4912
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:5648
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:9600
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"6⤵PID:18892
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:13092
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:2452
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:3272
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:18068
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:9884
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:8080
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:9592
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:2708
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"3⤵PID:4080
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:3460
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:18548
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:10048
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:13168
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:3300
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"3⤵PID:4596
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:12960
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:1988
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"3⤵PID:8644
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"3⤵PID:12460
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"3⤵PID:1424
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:1756 -
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"3⤵PID:1232
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:5832
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:11284
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:856
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:17280
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:7840
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:9492
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:1508
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:17384
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"3⤵PID:1912
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:6660
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:18532
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:9620
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:12968
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:5020
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"3⤵PID:6108
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:12516
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:6184
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"3⤵PID:8332
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"3⤵PID:12388
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"3⤵PID:5084
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
PID:5004 -
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"3⤵PID:5432
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:9356
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"5⤵PID:18560
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:12580
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:5668
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"3⤵PID:6744
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:12944
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:16932
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"3⤵PID:8916
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:18052
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"3⤵PID:12532
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"3⤵PID:17264
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"2⤵PID:4152
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"3⤵PID:7360
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:3404
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"3⤵PID:10064
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"4⤵PID:18076
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"3⤵PID:10512
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"3⤵PID:15872
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"3⤵PID:3444
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"2⤵PID:6124
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"3⤵PID:12500
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"3⤵PID:17320
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"2⤵PID:8120
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"3⤵PID:18540
-
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"2⤵PID:12356
-
-
C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103e76fde9cae0ddd9c130f04ddc91e0_NeikiAnalytics.exe"2⤵PID:5548
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\italian bukkake gay hot (!) shoes (Jade).mpg.exe
Filesize842KB
MD559e17fef71edb9ad3d9acba7ae7b77ca
SHA1798c4226e6e4c85b19b82488fdb473b98ac9a7d4
SHA256ea57770f5dd0efe1ef1596923d2c790191349d605a42c543082bb0672f6c4a93
SHA5124db3d076e511ebc285983db70a29808cd1257ed849c3d65b26821bcd3e5456a3c729c4e12d5cf62d25b28bdeedc14bdb7b797f22ee9881fd9d3fa4ecea38957a
-
Filesize
146B
MD50793cd77b15d5ed24b3dbffe9854f13d
SHA1bb38ff10bbc7ccd65502e0109075a0d15cb8785e
SHA256dfee76948f8f1e52045ce6be59ba32694d58d1b1f2e28ff9515bda6ba8d7f89d
SHA512b248f1143b7805c0f9da3ea7178abfcd8cf8484a41d4b407e287c3cbaa365ac2af54fde018320823a0aead4866125b9177413e002f9bafe88f637b538106639c