Analysis
-
max time kernel
10s -
max time network
65s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
10/05/2024, 03:05
Behavioral task
behavioral1
Sample
5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe
-
Size
1.8MB
-
MD5
5717935af78dce4970c93b5f33bbc8a0
-
SHA1
330c14147f0f6b88b3ec91b70a9c5a047930d67d
-
SHA256
02ddaa2fa9c09b2e20e7455f54196d1bf1a4d68c8311a69750aea02a13c5d8b7
-
SHA512
da5e0941ef0ff2d5c66c402b611009a0225aad0fc5c1745cc555e4b587117a89f9767515de0ede1ac2d2d17c01e44767bf67487c1265d3ebf26e43585c72ec83
-
SSDEEP
49152:P2k5+aL43rSG2WS5IWY2R+EhlfUTF1yBF7HVdiLhqIuYLv:P/Mo43L2WNg+EaFoBZVwrFv
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 8 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-711569230-3659488422-571408806-1000\Control Panel\International\Geo\Nation 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-711569230-3659488422-571408806-1000\Control Panel\International\Geo\Nation 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-711569230-3659488422-571408806-1000\Control Panel\International\Geo\Nation 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-711569230-3659488422-571408806-1000\Control Panel\International\Geo\Nation 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-711569230-3659488422-571408806-1000\Control Panel\International\Geo\Nation 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-711569230-3659488422-571408806-1000\Control Panel\International\Geo\Nation 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-711569230-3659488422-571408806-1000\Control Panel\International\Geo\Nation 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-711569230-3659488422-571408806-1000\Control Panel\International\Geo\Nation 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
resource yara_rule behavioral2/memory/2644-0-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/files/0x0007000000023417-5.dat upx behavioral2/memory/1584-29-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2976-160-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1964-161-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4544-180-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/888-181-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/980-182-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2420-185-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2068-189-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2976-190-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1964-191-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3328-192-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/452-188-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2912-187-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1584-186-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2644-184-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3288-183-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2644-193-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2700-217-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4896-216-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1016-215-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/920-214-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3844-213-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2384-212-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2220-211-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/840-210-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5772-219-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3096-220-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5904-234-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2420-233-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/6048-239-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2068-238-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/452-237-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2912-236-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5148-235-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5880-232-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5820-231-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3288-230-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5928-229-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5888-228-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5920-227-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5912-226-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5896-225-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5852-224-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5844-223-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5812-222-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5800-221-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/888-218-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3712-209-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1048-208-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5040-207-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4648-205-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2184-204-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/956-203-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3456-202-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1012-200-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2860-199-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4400-198-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4544-197-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2092-206-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/6792-245-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/880-201-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3520-244-0x0000000000400000-0x000000000041E000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\G: 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File opened (read-only) \??\H: 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File opened (read-only) \??\K: 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File opened (read-only) \??\P: 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File opened (read-only) \??\X: 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File opened (read-only) \??\Z: 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File opened (read-only) \??\B: 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File opened (read-only) \??\I: 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File opened (read-only) \??\J: 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File opened (read-only) \??\O: 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File opened (read-only) \??\S: 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File opened (read-only) \??\U: 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File opened (read-only) \??\E: 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File opened (read-only) \??\N: 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File opened (read-only) \??\Q: 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File opened (read-only) \??\R: 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File opened (read-only) \??\V: 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File opened (read-only) \??\A: 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File opened (read-only) \??\L: 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File opened (read-only) \??\M: 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File opened (read-only) \??\T: 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File opened (read-only) \??\W: 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File opened (read-only) \??\Y: 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe -
Drops file in System32 directory 12 IoCs
description ioc Process File created C:\Windows\SysWOW64\FxsTmp\french kicking [milf] .mpg.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\kicking public gorgeoushorny .rar.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\System32\DriverStore\Temp\porn lingerie [milf] shoes .rar.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\british fucking girls stockings (Britney,Melissa).zip.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\System32\LogFiles\Fax\Incoming\french horse sleeping (Anniston,Jenna).mpg.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\black blowjob xxx sleeping gorgeoushorny .rar.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\bukkake cumshot [milf] traffic .zip.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\brasilian trambling animal uncut cock mistress (Ashley,Ashley).avi.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\porn [milf] hotel .mpg.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\beast several models vagina (Ashley,Kathrin).mpg.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\danish nude lesbian [milf] .avi.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\french fucking [free] (Tatjana,Liz).rar.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe -
Drops file in Program Files directory 19 IoCs
description ioc Process File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\french xxx several models nipples ash (Jenna).avi.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\Microsoft Shared\spanish action voyeur boots .rar.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Temp\norwegian gay lesbian .mpg.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\Temp\EU9470.tmp\indian trambling catfight hole femdom .avi.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\cumshot animal girls feet swallow .rar.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\xxx lesbian several models (Christine,Samantha).zip.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft SQL Server\130\Shared\hardcore fucking girls .mpg.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\xxx full movie .avi.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\PrintAndShare\african gay gay voyeur femdom .mpg.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\Temp\indian gang bang [free] .avi.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\Templates\african fucking horse uncut redhair (Karin,Sonja).mpeg.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft SQL Server\130\Shared\german animal uncut lady (Curtney,Sonja).mpg.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\Updates\Download\gang bang lesbian cock swallow .avi.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Update\Download\lingerie full movie ejaculation (Christine).mpeg.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\Download\nude licking legs .rar.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\asian kicking [milf] .mpeg.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Program Files\Common Files\microsoft shared\kicking uncut legs pregnant .mpeg.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Program Files\dotnet\shared\porn cumshot big titts balls (Liz,Curtney).mpg.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\german lesbian voyeur 40+ (Ashley,Christine).mpg.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\Downloaded Program Files\brasilian nude gang bang [bangbus] wifey .zip.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_en-us_215194e2327a46ac\chinese nude public fishy .avi.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_it-it_adfc5e0bfca53431\beastiality several models boobs (Janette).zip.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_de-de_881b257d159a5de8\danish nude beastiality [free] boobs fishy .zip.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\security\templates\cum lesbian titts boots .zip.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_d38ece58f77171b4\brasilian cumshot bukkake several models .avi.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5fdc43acc1be690d\spanish action horse full movie young .mpg.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_uk-ua_5b152a8d329397ec\tyrkish fucking lingerie girls 40+ .mpeg.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-a..gement-uevtemplates_31bf3856ad364e35_10.0.19041.1_none_0d66b54875835a49\french trambling beastiality uncut hole femdom (Janette).avi.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-b..-bcdtemplate-client_31bf3856ad364e35_10.0.19041.1_none_de1581e9a275faf8\handjob blowjob sleeping cock .mpg.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-manager-shared_31bf3856ad364e35_10.0.19041.1266_none_7916f7558927ae23\bukkake handjob uncut mistress (Ashley).avi.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_en-us_5af076e0a3cb0fa7\indian gay several models feet girly (Curtney).mpg.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_ee7ea14f7d8a3ee3\gay animal [free] boobs .zip.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..ore-shareexperience_31bf3856ad364e35_10.0.19041.964_none_1c1a193f5bfcf136\danish action sleeping (Tatjana).mpeg.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.867_en-us_49453482f1fb5356\brasilian beastiality hot (!) hole .rar.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost_31bf3856ad364e35_10.0.19041.1202_none_621728fcd3c9d5f6\canadian trambling [free] beautyfull (Sarah).zip.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.1_none_5d54c0aac5c3c12c\blowjob sleeping .mpg.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.1_none_fa09f84703cb02c5\british fucking masturbation cock lady (Liz,Liz).zip.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_de-de_b1ffa0e7b4ed03e2\american sperm masturbation legs black hairunshaved (Christine).rar.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\InputMethod\SHARED\malaysia beast lesbian [milf] ash (Curtney,Christine).avi.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.1_none_f3b35d713ce0fc7f\indian beast beastiality [free] .mpeg.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..s-ime-eashared-ihds_31bf3856ad364e35_10.0.19041.1_none_e8996b7d3512363f\porn fetish girls ash (Gina).mpg.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\action [free] boots (Sandy,Gina).mpeg.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..se-shared-datafiles_31bf3856ad364e35_10.0.19041.1_none_2f5f00d280dce9f6\beastiality handjob masturbation mature .avi.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.1_none_9aa486d790131d4e\american beast [bangbus] feet pregnant (Britney).zip.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_10.0.19041.1_none_c6da8048542fddc7\trambling beastiality [milf] boobs YEâPSè& .avi.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p..al-securitytemplate_31bf3856ad364e35_10.0.19041.1_none_a3d9a07cf2290837\american blowjob sperm catfight cock 40+ .mpeg.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_en-us_310bfb76047869ad\french beastiality catfight lady .mpg.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ces-ime-eashared-lm_31bf3856ad364e35_10.0.19041.1_none_3d0229d17c310f10\action [free] bedroom .rar.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.844_none_57eddd48e7a74274\russian kicking public (Ashley).rar.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_en-us_bfae5918c0443f83\japanese lingerie girls femdom .zip.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_it-it_4c5922428a6f2d08\cumshot uncut .mpeg.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\italian lesbian trambling hot (!) vagina femdom (Sarah,Britney).zip.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\Downloads\norwegian gang bang xxx licking stockings .mpeg.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\inclusiveOobe\view\templates\german animal porn [free] .zip.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.ShellCommon.SharedResources\bukkake fetish [bangbus] .avi.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\Downloads\danish beastiality catfight castration .avi.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_es-es_211cf1c632a13851\black nude action several models .rar.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_it-it_bdb6c49fcea35732\horse hidden castration .mpeg.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-ime-eashared-ccshared_31bf3856ad364e35_10.0.19041.1_none_8c0b126c198fcf70\danish animal [milf] ash .zip.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\italian hardcore cumshot hidden stockings (Samantha).avi.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\SharedFileCache\norwegian handjob full movie shoes .mpg.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.928_none_33e0d5558cdd7c61\spanish action porn [free] fishy .zip.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_fd7349c396c417ae\cumshot lesbian voyeur girly .mpg.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\hardcore bukkake public .rar.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5021dd18efc0460c\blowjob xxx uncut gorgeoushorny .zip.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_es-es_30d7585a049f5b52\black hardcore bukkake uncut legs .zip.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.746_none_ab42fb092bda9182\lingerie cum sleeping .mpg.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\nude sleeping ash .mpeg.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_c3d467c525734eb3\hardcore big high heels .mpg.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.746_none_2212358fc33cc10f\bukkake uncut cock mature .mpg.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost_31bf3856ad364e35_10.0.19041.264_none_cb389cf57d74d691\black gang bang catfight ash (Kathrin).rar.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.1_none_a80cea873b2a6772\swedish kicking girls ash .avi.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_es-es_bf79b5fcc06b3128\african porn licking boots .mpg.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.844_none_855aff45853749ef\handjob xxx lesbian vagina swallow .avi.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_10.0.19041.1_none_f07d4fae3e8e883f\swedish handjob voyeur Ôï .mpeg.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor.Resources\porn [free] .rar.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\italian animal [free] blondie .zip.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.UI.ShellCommon\SharePickerUI\tyrkish bukkake nude masturbation granny .zip.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.746_none_1bbb9ab9fc52bac9\chinese handjob [free] (Jade).mpg.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-composable-sharepicker_31bf3856ad364e35_10.0.19041.1_none_c87e96327faffd0e\malaysia lingerie bukkake girls ash 50+ (Sandy,Tatjana).rar.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.789_en-us_58ebf9ecc407e3c0\kicking [free] 50+ (Jade).mpeg.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.84_none_81616275259e37fe\fucking sleeping glans fishy .avi.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-h..public-utils-shared_31bf3856ad364e35_10.0.19041.1202_none_d8a1416ab7cccdcf\russian lesbian porn [milf] glans upskirt (Christine).zip.exe 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 30 IoCs
pid Process 2644 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 2644 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 1584 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 1584 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 2644 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 2644 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 2976 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 2976 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 1964 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 1964 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 1584 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 1584 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 2644 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 2644 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 4544 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 4544 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 2700 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 2700 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 888 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 888 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 2976 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 2976 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 980 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 980 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 1584 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 1584 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 1964 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 1964 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 2644 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 2644 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 45 IoCs
description pid Process procid_target PID 2644 wrote to memory of 1584 2644 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 86 PID 2644 wrote to memory of 1584 2644 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 86 PID 2644 wrote to memory of 1584 2644 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 86 PID 1584 wrote to memory of 2976 1584 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 87 PID 1584 wrote to memory of 2976 1584 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 87 PID 1584 wrote to memory of 2976 1584 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 87 PID 2644 wrote to memory of 1964 2644 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 88 PID 2644 wrote to memory of 1964 2644 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 88 PID 2644 wrote to memory of 1964 2644 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 88 PID 2976 wrote to memory of 4544 2976 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 91 PID 2976 wrote to memory of 4544 2976 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 91 PID 2976 wrote to memory of 4544 2976 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 91 PID 1584 wrote to memory of 2700 1584 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 92 PID 1584 wrote to memory of 2700 1584 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 92 PID 1584 wrote to memory of 2700 1584 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 92 PID 1964 wrote to memory of 888 1964 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 93 PID 1964 wrote to memory of 888 1964 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 93 PID 1964 wrote to memory of 888 1964 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 93 PID 2644 wrote to memory of 980 2644 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 94 PID 2644 wrote to memory of 980 2644 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 94 PID 2644 wrote to memory of 980 2644 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 94 PID 4544 wrote to memory of 3096 4544 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 97 PID 4544 wrote to memory of 3096 4544 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 97 PID 4544 wrote to memory of 3096 4544 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 97 PID 2976 wrote to memory of 3288 2976 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 98 PID 2976 wrote to memory of 3288 2976 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 98 PID 2976 wrote to memory of 3288 2976 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 98 PID 1584 wrote to memory of 2420 1584 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 99 PID 1584 wrote to memory of 2420 1584 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 99 PID 1584 wrote to memory of 2420 1584 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 99 PID 2700 wrote to memory of 2912 2700 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 100 PID 2700 wrote to memory of 2912 2700 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 100 PID 2700 wrote to memory of 2912 2700 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 100 PID 1964 wrote to memory of 452 1964 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 102 PID 1964 wrote to memory of 452 1964 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 102 PID 1964 wrote to memory of 452 1964 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 102 PID 2644 wrote to memory of 2068 2644 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 101 PID 2644 wrote to memory of 2068 2644 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 101 PID 2644 wrote to memory of 2068 2644 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 101 PID 888 wrote to memory of 3520 888 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 103 PID 888 wrote to memory of 3520 888 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 103 PID 888 wrote to memory of 3520 888 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 103 PID 980 wrote to memory of 3328 980 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 104 PID 980 wrote to memory of 3328 980 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 104 PID 980 wrote to memory of 3328 980 5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe 104
Processes
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"1⤵
- Checks computer location settings
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2644 -
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1584 -
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2976 -
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4544 -
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:3096
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:2860
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"7⤵PID:8552
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"8⤵PID:16824
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"7⤵PID:11588
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"7⤵PID:15688
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:2704
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"7⤵PID:8424
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"8⤵PID:16816
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"7⤵PID:11600
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"7⤵PID:15680
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:5760
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"7⤵PID:9152
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"7⤵PID:12544
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"7⤵PID:15552
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:7644
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"7⤵PID:15944
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:8488
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:13940
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:2180
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:4400
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:3220
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"7⤵PID:8260
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"8⤵PID:15712
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"7⤵PID:10996
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"7⤵PID:16356
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:5752
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"7⤵PID:9052
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"7⤵PID:12388
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"7⤵PID:924
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:7268
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"7⤵PID:12420
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"7⤵PID:15560
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:9536
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:12320
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:15380
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:2092
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:8020
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"7⤵PID:16588
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:11148
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:16440
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:5772
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:8996
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:12280
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:12364
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:7396
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:14248
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:15308
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:9360
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:13296
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:15416
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:3288
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:1012
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:8080
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"7⤵PID:13576
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:10476
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:15952
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:500
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:8964
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"7⤵PID:19884
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:12244
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:15624
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:5888
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:8460
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:12436
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:15568
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:7620
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:14164
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:5072
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:10104
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:13372
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:15324
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:3276
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:8416
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:17756
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:11576
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:16324
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:2152
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:8088
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:18424
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:11140
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:16448
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:5812
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:9340
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:13304
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:12844
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:7604
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:15976
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:10288
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:15968
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2700 -
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:2912
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:3100
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:8704
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"7⤵PID:17100
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:11884
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:15664
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:2220
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:5584
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"7⤵PID:12864
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"7⤵PID:15504
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:9660
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:12316
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:16016
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:5920
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:8808
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:13040
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:15484
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:7628
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:15936
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:10144
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:13364
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:3348
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:956
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:8148
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:15920
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:10788
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:15792
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:1048
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:7356
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:12848
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:15520
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:9368
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:12944
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:15368
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:5820
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:9080
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:12512
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:15544
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:7380
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:12928
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:15496
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:9332
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:13272
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:15444
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"3⤵PID:2420
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:2184
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:8072
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:15896
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:11028
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:15776
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:3712
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:6972
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:11988
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:15648
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:9044
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:12200
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:15608
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:5896
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:9244
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:12800
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:15528
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:8008
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:15888
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:10592
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:15824
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"3⤵PID:3456
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:7388
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:12412
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:15584
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:9600
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:13220
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:15456
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"3⤵PID:840
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:6792
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:10000
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:1392
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:15392
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:8696
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:2132
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:11736
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:15656
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"3⤵PID:5880
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:9432
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:12328
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:15400
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"3⤵PID:7652
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:15912
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"3⤵PID:10224
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"3⤵PID:13600
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"3⤵PID:4824
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1964 -
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:888 -
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:3520
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:3592
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:8840
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"7⤵PID:16808
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:12084
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:15632
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:3844
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:7636
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"7⤵PID:12908
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"7⤵PID:15512
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:10192
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:13840
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:15304
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:5904
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:9800
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:13264
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:15424
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:7596
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:15864
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:9508
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:13928
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:15300
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:2760
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:8300
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:15800
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:10340
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:15744
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:920
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:7556
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:15872
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:11080
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:15760
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:5148
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:9808
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:13288
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:15332
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:7792
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:17076
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:11132
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:16008
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"3⤵PID:452
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:3748
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:8316
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:16568
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:11160
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:15752
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:2384
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:6964
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:11876
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:15672
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:9008
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:12148
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:15616
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:5912
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:8452
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:12428
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:15576
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:7588
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:14268
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:1088
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:10132
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:13328
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:4624
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"3⤵PID:3492
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:8432
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:17748
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:11440
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:16000
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"3⤵PID:5040
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:8056
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:15832
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:10796
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:15768
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"3⤵PID:5844
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:9072
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:11620
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:15600
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"3⤵PID:8112
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:15848
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"3⤵PID:10672
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"3⤵PID:15816
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:980 -
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"3⤵PID:3328
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:4976
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:8104
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:15840
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:10668
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:15808
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:1016
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:8132
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"6⤵PID:15904
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:10956
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:15356
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:5928
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:9136
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:12808
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:15536
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:7612
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:15856
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:9220
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:13380
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:4744
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"3⤵PID:2620
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:8532
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:17116
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:11532
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:16348
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"3⤵PID:4896
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:7660
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:15992
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:4564
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:13856
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:4284
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"3⤵PID:6048
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:8800
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:13280
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:15468
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"3⤵PID:7952
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:15316
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"3⤵PID:11116
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"3⤵PID:16472
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"2⤵PID:2068
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"3⤵PID:4648
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:6980
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:12092
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:15640
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:9088
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:12380
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:15340
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"3⤵PID:4036
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:8096
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"5⤵PID:15928
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:10804
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:15784
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"3⤵PID:5852
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:9352
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:13116
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:3816
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"3⤵PID:7580
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:13424
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:15348
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:20440
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"3⤵PID:10432
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"3⤵PID:15960
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"2⤵PID:880
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"3⤵PID:8064
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:15880
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"3⤵PID:10780
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"3⤵PID:15724
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"2⤵PID:3132
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"3⤵PID:8308
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"4⤵PID:17812
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"3⤵PID:11540
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"3⤵PID:15704
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"2⤵PID:5800
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"3⤵PID:9100
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"3⤵PID:12396
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"3⤵PID:15592
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"2⤵PID:7572
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"3⤵PID:15984
-
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"2⤵PID:10232
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"2⤵PID:13848
-
-
C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5717935af78dce4970c93b5f33bbc8a0_NeikiAnalytics.exe"2⤵PID:3600
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\cumshot animal girls feet swallow .rar.exe
Filesize585KB
MD5cbd38baf23b6908398b3967ea117b100
SHA1ddd125e203840fdf715b56e2a562f7a86185d55a
SHA2563b8d47596ca7d98d5a125a6c890b73207764166c09cb586d6eb442d721d22d12
SHA512250786a91567d4bdd70675bf7f35b92251a640b90e620cdfc3c5340039bed99415ea26de707437b522b44fdf900fddc33add25029294f8f43c0cbf5faaad0f6f