Analysis
-
max time kernel
149s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
10/05/2024, 23:41
Behavioral task
behavioral1
Sample
2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe
-
Size
1.7MB
-
MD5
2f6c581c3c8ea0d78286bdec921f1700
-
SHA1
270e6c4ca204dc621c607ae11b3d3f45438cd076
-
SHA256
fa3c8a6d6072494341c4de5f0d3f0297f0cf8732a89ce58ccf6f59a8c7e8fb8c
-
SHA512
98287a2b93e72bae3b82291d96b84f23344c6335f2d3b5eeec2029a8726be82bac0e51708d3414a9c00b8de9d72598f6a33f4f8c75781953467315658af05219
-
SSDEEP
49152:LOEKwXtJFMCLq1hthTtSaDx8wXfp67Cs1sv:KEKwdwCLqvtr7XfpA1sv
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 9 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-711569230-3659488422-571408806-1000\Control Panel\International\Geo\Nation 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-711569230-3659488422-571408806-1000\Control Panel\International\Geo\Nation 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-711569230-3659488422-571408806-1000\Control Panel\International\Geo\Nation 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-711569230-3659488422-571408806-1000\Control Panel\International\Geo\Nation 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-711569230-3659488422-571408806-1000\Control Panel\International\Geo\Nation 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-711569230-3659488422-571408806-1000\Control Panel\International\Geo\Nation 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-711569230-3659488422-571408806-1000\Control Panel\International\Geo\Nation 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-711569230-3659488422-571408806-1000\Control Panel\International\Geo\Nation 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-711569230-3659488422-571408806-1000\Control Panel\International\Geo\Nation 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
resource yara_rule behavioral2/memory/3692-0-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/files/0x000700000002340f-5.dat upx behavioral2/memory/3008-30-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3964-168-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3908-170-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2944-171-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4776-185-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4864-186-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3592-187-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1084-189-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3692-188-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3532-191-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1836-192-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1376-193-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3008-190-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5072-195-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1840-194-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3692-196-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3612-197-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3964-198-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1472-199-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2832-200-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2944-201-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/844-204-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1712-206-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4864-205-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4776-203-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4228-202-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1360-209-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1084-208-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3592-207-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4672-211-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3532-210-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1376-212-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5072-213-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3612-215-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2832-216-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/564-217-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5212-219-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/844-218-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1712-220-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5316-221-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1360-224-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2420-223-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4028-222-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4672-225-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5520-226-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5604-230-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5552-228-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3000-229-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/960-227-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5732-234-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5836-238-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5148-239-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5948-240-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5128-237-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5724-233-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/232-232-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3836-231-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5212-241-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/6112-242-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5440-246-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5220-245-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5316-244-0x0000000000400000-0x000000000041E000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\P: 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File opened (read-only) \??\R: 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File opened (read-only) \??\U: 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File opened (read-only) \??\Z: 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File opened (read-only) \??\G: 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File opened (read-only) \??\L: 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File opened (read-only) \??\N: 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File opened (read-only) \??\I: 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File opened (read-only) \??\K: 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File opened (read-only) \??\O: 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File opened (read-only) \??\T: 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File opened (read-only) \??\W: 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File opened (read-only) \??\A: 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File opened (read-only) \??\B: 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File opened (read-only) \??\H: 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File opened (read-only) \??\Y: 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File opened (read-only) \??\J: 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File opened (read-only) \??\M: 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File opened (read-only) \??\Q: 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File opened (read-only) \??\X: 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File opened (read-only) \??\E: 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File opened (read-only) \??\S: 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File opened (read-only) \??\V: 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe -
Drops file in System32 directory 12 IoCs
description ioc Process File created C:\Windows\SysWOW64\IME\SHARED\danish handjob gay [milf] hole redhair .rar.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\african blowjob several models titts .rar.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\black horse trambling uncut high heels (Christine,Melissa).avi.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\xxx licking .rar.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\System32\LogFiles\Fax\Incoming\danish gang bang fucking voyeur .mpeg.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\trambling hot (!) (Sylvia).rar.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\bukkake [free] feet hairy (Liz).zip.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\indian fetish xxx sleeping (Janette).rar.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\indian cumshot gay public sm .mpeg.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\american porn sperm big 50+ .rar.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\System32\DriverStore\Temp\lingerie girls (Liz).avi.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\beast masturbation young (Gina,Janette).mpg.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe -
Drops file in Program Files directory 19 IoCs
description ioc Process File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\xxx masturbation titts mistress (Karin).avi.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\Updates\Download\xxx uncut glans hotel .zip.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Temp\italian action hardcore voyeur cock 40+ .rar.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\horse catfight titts mistress (Curtney).rar.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Program Files\Common Files\microsoft shared\xxx voyeur (Liz).avi.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Program Files\dotnet\shared\indian horse lesbian [free] hairy .rar.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\bukkake public gorgeoushorny .mpg.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\brasilian handjob horse catfight cock .mpeg.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\bukkake licking mature (Kathrin,Sarah).mpeg.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\Temp\sperm [milf] ash .zip.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\Templates\xxx catfight cock .rar.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft SQL Server\130\Shared\horse girls (Karin).avi.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\PrintAndShare\indian porn xxx licking 40+ .zip.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\Microsoft Shared\bukkake girls black hairunshaved .zip.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Update\Download\indian action horse uncut hole .mpeg.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\Temp\EU9470.tmp\sperm hot (!) titts .mpg.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft SQL Server\130\Shared\trambling several models feet .zip.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\brasilian gang bang lingerie masturbation mature .rar.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\Download\black cumshot trambling [free] titts granny (Samantha).avi.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe -
Drops file in Windows directory 50 IoCs
description ioc Process File created C:\Windows\CbsTemp\tyrkish nude horse hot (!) feet .zip.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\Downloaded Program Files\beast hidden .avi.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\PLA\Templates\american handjob bukkake catfight titts girly .avi.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\american action beast sleeping feet .mpeg.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.928_none_33e0d5558cdd7c61\cumshot trambling uncut cock ash .avi.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\assembly\temp\russian action blowjob hidden stockings .rar.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_de-de_7860bee9439c3ae7\lesbian [free] .mpeg.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\japanese action sperm catfight blondie .mpeg.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_it-it_adfc5e0bfca53431\beast catfight balls .zip.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.789_en-us_58ebf9ecc407e3c0\bukkake masturbation blondie .zip.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\Downloads\tyrkish gang bang gay full movie traffic .avi.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\templates\indian beastiality horse full movie stockings .avi.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_en-us_310bfb76047869ad\blowjob hot (!) swallow (Sandy,Tatjana).zip.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5fdc43acc1be690d\beastiality horse girls titts girly .mpg.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor.Resources\hardcore big titts .rar.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\indian cum xxx masturbation redhair .mpg.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor.Resources\gay big gorgeoushorny (Ashley,Samantha).avi.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Templates\brasilian kicking hardcore [free] cock blondie (Liz).mpeg.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\SharedFileCache\black cum beast girls feet young .rar.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.ShellCommon.SharedResources\lesbian uncut Ôï (Jenna,Liz).zip.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\american gang bang beast girls sm .zip.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5021dd18efc0460c\blowjob hidden titts stockings .mpg.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\inclusiveOobe\view\templates\horse licking tß .mpg.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.867_en-us_49453482f1fb5356\german hardcore big (Sylvia).mpg.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost_31bf3856ad364e35_10.0.19041.264_none_cb389cf57d74d691\brasilian porn horse [milf] feet shower .zip.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\InputMethod\SHARED\gay hot (!) YEâPSè& .rar.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_es-es_211cf1c632a13851\norwegian trambling [milf] swallow (Jenna,Sylvia).avi.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_c3d467c525734eb3\norwegian lesbian uncut titts .rar.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-composable-sharepicker_31bf3856ad364e35_10.0.19041.1_none_c87e96327faffd0e\french bukkake [bangbus] bondage (Christine,Sarah).zip.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-b..-bcdtemplate-client_31bf3856ad364e35_10.0.19041.1_none_de1581e9a275faf8\sperm voyeur glans .mpg.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\mssrv.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\security\templates\horse licking feet bondage .mpg.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_it-it_bdb6c49fcea35732\malaysia sperm [free] .rar.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-a..gement-uevtemplates_31bf3856ad364e35_10.0.19041.1_none_0d66b54875835a49\cumshot sperm full movie shower .rar.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.1_none_0bc0f3d4cd7dc8fd\spanish blowjob catfight (Jade).mpeg.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost_31bf3856ad364e35_10.0.19041.1202_none_621728fcd3c9d5f6\japanese nude trambling girls circumcision .avi.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor\sperm [bangbus] titts hotel (Sylvia).rar.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_de-de_881b257d159a5de8\norwegian bukkake public cock .rar.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\lingerie masturbation (Tatjana).avi.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\assembly\tmp\hardcore uncut pregnant .avi.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor\lesbian licking .rar.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Templates\fucking several models feet lady (Melissa).mpeg.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_en-us_215194e2327a46ac\nude xxx lesbian (Janette).mpg.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_es-es_30d7585a049f5b52\cum beast catfight glans .mpeg.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_d38ece58f77171b4\black gang bang blowjob several models titts bedroom .mpeg.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_uk-ua_5b152a8d329397ec\cum lingerie girls shower .mpeg.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\japanese kicking hardcore masturbation sweet .avi.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\italian action fucking [free] titts circumcision .avi.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.UI.ShellCommon\SharePickerUI\canadian sperm uncut fishy .avi.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\Downloads\danish action beast [milf] .avi.exe 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 50 IoCs
pid Process 3692 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 3692 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 3008 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 3008 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 3692 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 3692 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 1836 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 1836 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 1840 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 1840 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 3008 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 3008 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 3692 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 3692 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 3964 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 3964 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 1472 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 1472 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 3008 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 3008 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 3692 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 3692 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 2944 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 2944 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 3908 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 3908 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 1836 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 1840 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 1836 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 1840 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 4776 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 4776 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 4864 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 4864 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 4228 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 4228 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 3692 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 3692 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 3008 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 3008 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 3964 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 3964 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 3592 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 3592 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 1084 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 1084 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 3532 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 3532 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 1840 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 1840 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 57 IoCs
description pid Process procid_target PID 3692 wrote to memory of 3008 3692 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 88 PID 3692 wrote to memory of 3008 3692 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 88 PID 3692 wrote to memory of 3008 3692 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 88 PID 3008 wrote to memory of 1836 3008 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 94 PID 3008 wrote to memory of 1836 3008 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 94 PID 3008 wrote to memory of 1836 3008 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 94 PID 3692 wrote to memory of 1840 3692 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 95 PID 3692 wrote to memory of 1840 3692 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 95 PID 3692 wrote to memory of 1840 3692 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 95 PID 3692 wrote to memory of 3964 3692 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 98 PID 3692 wrote to memory of 3964 3692 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 98 PID 3692 wrote to memory of 3964 3692 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 98 PID 3008 wrote to memory of 1472 3008 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 99 PID 3008 wrote to memory of 1472 3008 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 99 PID 3008 wrote to memory of 1472 3008 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 99 PID 1836 wrote to memory of 3908 1836 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 100 PID 1836 wrote to memory of 3908 1836 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 100 PID 1836 wrote to memory of 3908 1836 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 100 PID 1840 wrote to memory of 2944 1840 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 101 PID 1840 wrote to memory of 2944 1840 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 101 PID 1840 wrote to memory of 2944 1840 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 101 PID 3692 wrote to memory of 4228 3692 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 103 PID 3692 wrote to memory of 4228 3692 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 103 PID 3692 wrote to memory of 4228 3692 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 103 PID 3008 wrote to memory of 4776 3008 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 104 PID 3008 wrote to memory of 4776 3008 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 104 PID 3008 wrote to memory of 4776 3008 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 104 PID 3964 wrote to memory of 4864 3964 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 105 PID 3964 wrote to memory of 4864 3964 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 105 PID 3964 wrote to memory of 4864 3964 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 105 PID 1840 wrote to memory of 3592 1840 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 106 PID 1840 wrote to memory of 3592 1840 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 106 PID 1840 wrote to memory of 3592 1840 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 106 PID 1836 wrote to memory of 1084 1836 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 107 PID 1836 wrote to memory of 1084 1836 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 107 PID 1836 wrote to memory of 1084 1836 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 107 PID 1472 wrote to memory of 3532 1472 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 108 PID 1472 wrote to memory of 3532 1472 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 108 PID 1472 wrote to memory of 3532 1472 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 108 PID 2944 wrote to memory of 1376 2944 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 109 PID 2944 wrote to memory of 1376 2944 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 109 PID 2944 wrote to memory of 1376 2944 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 109 PID 3908 wrote to memory of 5072 3908 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 110 PID 3908 wrote to memory of 5072 3908 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 110 PID 3908 wrote to memory of 5072 3908 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 110 PID 3692 wrote to memory of 3612 3692 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 113 PID 3692 wrote to memory of 3612 3692 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 113 PID 3692 wrote to memory of 3612 3692 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 113 PID 3008 wrote to memory of 564 3008 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 114 PID 3008 wrote to memory of 564 3008 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 114 PID 3008 wrote to memory of 564 3008 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 114 PID 3964 wrote to memory of 2832 3964 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 115 PID 3964 wrote to memory of 2832 3964 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 115 PID 3964 wrote to memory of 2832 3964 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 115 PID 4776 wrote to memory of 844 4776 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 116 PID 4776 wrote to memory of 844 4776 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 116 PID 4776 wrote to memory of 844 4776 2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe 116
Processes
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"1⤵
- Checks computer location settings
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3692 -
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3008 -
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1836 -
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3908 -
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:5072
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:5148
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:6496
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"8⤵PID:10460
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"9⤵PID:11480
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"8⤵PID:14760
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"8⤵PID:20816
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:8620
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"8⤵PID:16868
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"8⤵PID:24564
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:11840
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"8⤵PID:23656
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:17108
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:24008
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:5136
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:9084
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"8⤵PID:21112
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:12852
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:18168
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:25388
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:7824
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:14548
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:20876
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:10344
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:9804
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:14420
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:20772
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:2420
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:6352
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:9632
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"8⤵PID:21348
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:13324
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:18716
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:26400
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:8260
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:16904
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:14644
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:11276
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:23448
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:16056
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:6232
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:5732
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:7796
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:14528
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:20868
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:10468
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:11188
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:14428
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:20796
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:7244
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:13564
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:18604
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:22404
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:10004
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:2292
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:13360
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:2276
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:1084 -
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:5128
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:6472
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:10852
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"8⤵PID:11592
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:14868
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:21248
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:8484
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:17368
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:24460
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:11304
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:24228
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:16064
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:7580
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:6112
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:8656
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:16780
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:5908
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:11816
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:23648
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:17100
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:23976
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:7860
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:15456
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:10276
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:10436
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:2636
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:14876
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:21088
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:1360
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:6244
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:9308
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:21388
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:13136
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:18536
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:26164
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:7644
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:16652
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:22648
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:11116
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:23424
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:15312
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:18640
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:5724
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:7572
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:14388
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:21072
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:10044
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:10228
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:14132
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:20300
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:6684
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:13572
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:19380
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:7180
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:9756
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:21356
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:736
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:18680
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:26376
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1472 -
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:3532 -
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:3836
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:6464
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:10528
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"8⤵PID:23440
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:15788
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:5444
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:8472
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:16660
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:14636
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:11324
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:23432
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:16072
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:7664
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:6124
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:8668
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:16888
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:16124
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:11916
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:23840
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:17116
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:24216
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:7764
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:13992
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:20644
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:10444
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:6576
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:4404
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:20508
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:4672
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:6340
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:10132
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:10064
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:14196
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:20396
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:26832
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:7724
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:16460
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:22564
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:10892
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:23456
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:15784
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:5588
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:5932
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:7212
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:16228
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:9808
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:11068
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:23524
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:14540
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:21960
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:7436
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:13740
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:19668
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:5844
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:9972
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:21412
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:13692
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:19660
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:6044
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4776 -
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:844
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:5948
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:8164
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:16236
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:11524
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:10908
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:23488
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:15020
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:21096
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:7508
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:14124
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:20292
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:10120
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:21972
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:14188
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:20404
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:5420
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:7012
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:12876
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:18356
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:25540
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:9812
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:21880
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:13668
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:18628
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:1148
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:6824
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:12472
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:5008
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:17696
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:24640
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:9004
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:18420
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:1544
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:12356
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:26384
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:17544
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:16840
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵PID:564
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:5552
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:7392
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:13984
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:20520
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:9988
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:9820
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:14140
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:20308
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:7068
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:12632
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:17860
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:25352
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:9288
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:19968
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:12976
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:18280
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:11468
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵PID:5412
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:7004
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:12588
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:17836
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:25376
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:9456
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:21272
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:13032
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:18116
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:24428
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵PID:6836
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:12480
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:17812
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:25328
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵PID:9184
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:18872
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:2444
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵PID:12492
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:25560
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵PID:17820
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵PID:25344
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1840 -
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2944 -
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:1376
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:5212
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:6480
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:10452
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"8⤵PID:10248
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:14412
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:20804
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:8412
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:17376
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:24448
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:11312
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:23472
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:15440
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:10260
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:5440
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:8992
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:17720
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:25360
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:12328
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:26156
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:17536
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:17568
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:7868
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:16288
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:10144
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:10484
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:11484
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:14404
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:20780
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:960
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:6300
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:9640
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:21328
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:13160
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:18696
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:26408
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:7716
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:16208
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:11444
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:10776
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:23508
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:15800
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:5476
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:5900
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:8736
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:17360
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:24440
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:12000
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:5084
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:17124
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:24208
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:7444
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:15012
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:21104
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:9964
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:8088
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:13676
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:19196
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:3784
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:3592 -
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:232
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:6488
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:10640
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:13828
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:14608
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:20788
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:8424
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:16912
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:14836
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:11332
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:23464
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:16096
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:8140
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:6104
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:8700
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:19056
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:116
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:12804
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:18288
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:19468
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:7812
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:16220
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:8936
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:10320
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:8876
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:14396
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:20764
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵PID:4028
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:5220
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:7372
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:21404
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:12564
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:26636
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:17712
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:24688
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:7848
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:15156
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:21864
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:10336
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:10572
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:13368
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:20484
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵PID:5604
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:7452
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:15320
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:20708
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:9980
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:3452
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:13700
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:19368
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:4036
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵PID:6452
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:13716
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:4440
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:3884
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵PID:9624
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:21264
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵PID:13040
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵PID:18688
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵PID:26368
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3964 -
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:4864 -
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:3000
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:6292
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:9092
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"7⤵PID:21240
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:12860
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:18264
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:25476
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:7632
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:13616
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:22572
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:11044
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:21936
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:14800
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:21872
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:5836
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:7804
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:2412
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:2932
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:10352
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:9376
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:14032
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:20504
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:7460
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:14148
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:20284
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:9996
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:5276
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:13732
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:19820
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:5560
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵PID:2832
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:5520
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:7236
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:13708
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:19400
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:3172
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:9956
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:11288
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:13684
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:19188
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:4428
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:6972
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:12596
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:17828
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:25336
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:9348
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:20728
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:12396
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:17596
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:21924
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵PID:5400
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:6988
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:12644
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:17872
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:25368
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:9324
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:21364
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:13116
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:18412
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:19564
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵PID:6844
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:11272
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:25624
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:17428
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:16400
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵PID:9140
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:19352
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:26564
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵PID:12464
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:4092
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵PID:17688
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵PID:24680
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
PID:4228 -
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵PID:1712
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:6264
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:9340
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"6⤵PID:21064
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:12404
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:17604
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:21968
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:8332
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:16716
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:21144
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:11364
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:23516
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:16084
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:7660
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵PID:5576
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:7316
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:12904
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:18272
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:25484
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:10032
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:22124
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:14116
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:20316
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵PID:6980
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:14156
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:20276
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵PID:9448
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:21380
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵PID:13292
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵PID:17588
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵PID:21472
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"2⤵PID:3612
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵PID:5316
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:6956
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:13508
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:19392
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:5296
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:9300
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:21372
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:13084
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:18336
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:25588
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵PID:6664
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:11648
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"5⤵PID:23480
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:16924
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:23640
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵PID:8824
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:16876
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:16404
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵PID:12200
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:21816
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵PID:16808
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵PID:16144
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"2⤵PID:5308
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵PID:6964
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:12828
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:18092
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:25468
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵PID:9332
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:21396
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵PID:12928
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵PID:18296
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵PID:19652
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"2⤵PID:6640
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵PID:11000
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"4⤵PID:14464
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵PID:15808
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵PID:5156
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"2⤵PID:8812
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵PID:15048
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵PID:16148
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"2⤵PID:12192
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"3⤵PID:21476
-
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"2⤵PID:16812
-
-
C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2f6c581c3c8ea0d78286bdec921f1700_NeikiAnalytics.exe"2⤵PID:16180
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\xxx masturbation titts mistress (Karin).avi.exe
Filesize948KB
MD5a7c3d1b1122e9ced2e6a339c41dd0644
SHA1df3272b78c1fa58b03651111413c4a246dcee32d
SHA25631dee1d5ff985322d748673bfe8ea9a943abe700153ed0a773f483da53696a4f
SHA5126418f66340c80a911c9c0fa4553b5c7aded03df86732321a95a40dcb9d663cead688963a428f91e410e236c2f234e0e5f641befe3543b82e3a3a707831383f36