Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
11s -
max time network
67s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
10/05/2024, 12:27
Static task
static1
Behavioral task
behavioral1
Sample
e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe
-
Size
125KB
-
MD5
e058b3b7dbb86731007d4501b2532000
-
SHA1
0ee6950512e06b2ab6b34e7bffd443a1913a1655
-
SHA256
f040be41035e26348f182a6a7aacac764d06ec5a33a948da57b63723818fa3ca
-
SHA512
d90ba8561633c2efaaba101143e9dcb9d62bfcc3a0782ce3d55c7203cb52aaefbd631377fdf2c77d65be7b7a8eefee6a59536ba0a59fe37357f3efa5dccd1bb3
-
SSDEEP
3072:aDOkexJLFdrrXiHXktT4TxSgJYplNf1Z81:aDOxZXrSHXUTskv81
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 11 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000\Control Panel\International\Geo\Nation e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000\Control Panel\International\Geo\Nation e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000\Control Panel\International\Geo\Nation e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000\Control Panel\International\Geo\Nation e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000\Control Panel\International\Geo\Nation e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000\Control Panel\International\Geo\Nation e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000\Control Panel\International\Geo\Nation e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000\Control Panel\International\Geo\Nation e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000\Control Panel\International\Geo\Nation e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000\Control Panel\International\Geo\Nation e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000\Control Panel\International\Geo\Nation e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\X: e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File opened (read-only) \??\B: e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File opened (read-only) \??\L: e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File opened (read-only) \??\O: e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File opened (read-only) \??\R: e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File opened (read-only) \??\W: e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File opened (read-only) \??\G: e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File opened (read-only) \??\H: e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File opened (read-only) \??\P: e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File opened (read-only) \??\Q: e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File opened (read-only) \??\Y: e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File opened (read-only) \??\J: e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File opened (read-only) \??\K: e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File opened (read-only) \??\M: e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File opened (read-only) \??\Z: e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File opened (read-only) \??\T: e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File opened (read-only) \??\U: e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File opened (read-only) \??\V: e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File opened (read-only) \??\A: e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File opened (read-only) \??\E: e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File opened (read-only) \??\I: e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File opened (read-only) \??\N: e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File opened (read-only) \??\S: e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe -
Drops file in System32 directory 12 IoCs
description ioc Process File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\indian fetish fetish hidden .rar.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\danish cumshot catfight (Jenna,Kathrin).rar.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\american lesbian hot (!) boots .mpg.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\norwegian action licking (Gina).rar.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\System32\DriverStore\Temp\fetish [free] titts (Jade,Gina).zip.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\brasilian action horse voyeur glans traffic .rar.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\System32\LogFiles\Fax\Incoming\nude porn full movie castration .rar.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\asian handjob lingerie licking cock bondage (Gina).rar.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\indian animal cum licking penetration (Sarah,Tatjana).avi.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\cumshot hot (!) hole hairy (Ashley).mpg.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\kicking lesbian full movie glans bondage .rar.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\brasilian xxx handjob [bangbus] cock (Sarah).avi.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe -
Drops file in Program Files directory 18 IoCs
description ioc Process File created C:\Program Files (x86)\Google\Temp\lesbian sleeping bondage .rar.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Update\Download\danish animal gang bang [bangbus] shower .mpeg.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\Temp\lingerie blowjob hidden ash sm (Kathrin).zip.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\lesbian hot (!) .mpg.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\Updates\Download\horse cum [bangbus] young .avi.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft SQL Server\130\Shared\american lingerie girls ejaculation .mpg.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\xxx sleeping (Curtney,Sandy).zip.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\Download\bukkake bukkake lesbian .mpg.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\fucking public young .rar.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Program Files\Common Files\microsoft shared\indian gay [free] hole pregnant .mpg.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\Templates\gang bang several models .rar.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft SQL Server\130\Shared\action [free] traffic .avi.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\french kicking fucking girls .rar.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\PrintAndShare\cumshot catfight redhair .rar.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\Microsoft Shared\horse hardcore sleeping sweet (Sylvia).mpg.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Program Files\dotnet\shared\japanese fetish action girls (Kathrin,Ashley).mpeg.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\norwegian action trambling full movie cock .mpeg.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\british horse masturbation .zip.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor\indian gay sperm full movie cock 40+ .mpeg.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\templates\lingerie big (Sandy,Sandy).rar.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.844_none_855aff45853749ef\fucking masturbation hotel .mpeg.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\german lingerie xxx lesbian .mpg.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_en-us_215194e2327a46ac\spanish bukkake hot (!) (Karin).zip.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_de-de_881b257d159a5de8\bukkake cum sleeping nipples young (Sonja).rar.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.844_none_67b5915b5651dd8a\danish kicking horse voyeur .mpg.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.746_none_d01527cffa9c25bc\nude full movie nipples (Liz).zip.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\russian trambling hot (!) .mpeg.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\InputMethod\SHARED\french xxx uncut (Curtney,Sylvia).avi.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\american animal lesbian hole traffic .zip.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-ime-eashared-proxy_31bf3856ad364e35_10.0.19041.1_none_4c786ae2f508e6d5\black horse lingerie licking fishy (Jenna,Britney).rar.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.1_none_f3b35d713ce0fc7f\spanish horse [free] .rar.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\Downloaded Program Files\kicking porn several models nipples (Kathrin).mpg.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.84_none_81616275259e37fe\russian horse gay sleeping .mpeg.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\mssrv.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_it-it_adfc5e0bfca53431\british fucking public .avi.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_uk-ua_5b152a8d329397ec\chinese bukkake lesbian [free] glans .mpg.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.1_none_5d54c0aac5c3c12c\gang bang [bangbus] femdom (Ashley).mpg.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_es-es_211cf1c632a13851\malaysia cum licking redhair .mpg.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.746_none_1bbb9ab9fc52bac9\cumshot cumshot full movie mature .mpg.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.1_none_9aa486d790131d4e\nude big (Karin).zip.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\PLA\Templates\asian trambling big circumcision (Sonja).avi.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\malaysia action hot (!) (Sarah).zip.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_c3d467c525734eb3\nude several models balls (Samantha,Ashley).rar.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5021dd18efc0460c\french animal horse big stockings (Ashley).zip.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_it-it_bdb6c49fcea35732\xxx action hot (!) swallow .mpeg.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.1_none_833abdc06c68d338\british fucking kicking girls (Sylvia,Liz).mpeg.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.746_none_ab42fb092bda9182\black beastiality uncut sweet .mpeg.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.1_none_a80cea873b2a6772\malaysia beastiality porn sleeping mature .rar.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\assembly\tmp\swedish fetish uncut (Samantha).rar.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\Downloads\lingerie [milf] high heels .mpeg.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_en-us_310bfb76047869ad\swedish horse several models mistress .mpg.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_es-es_30d7585a049f5b52\handjob [free] sweet .avi.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-a..gement-uevtemplates_31bf3856ad364e35_10.0.19041.1_none_0d66b54875835a49\nude beast public pregnant .mpeg.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.1_none_fa09f84703cb02c5\danish gang bang handjob big bedroom .zip.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.746_none_2212358fc33cc10f\horse animal girls bedroom .mpg.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.867_none_c29826784f9429f8\blowjob kicking sleeping boobs .mpeg.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor.Resources\russian beast public upskirt .mpg.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\security\templates\indian gay sleeping ash Ôï .mpg.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.UI.ShellCommon\SharePickerUI\asian nude licking femdom .rar.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_de-de_7860bee9439c3ae7\porn sperm several models .avi.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.867_en-us_49453482f1fb5356\kicking beast [bangbus] (Sandy,Sonja).mpg.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\assembly\temp\porn fetish catfight (Curtney).avi.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5fdc43acc1be690d\beastiality big .rar.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_10.0.19041.1_none_f07d4fae3e8e883f\handjob animal voyeur sm .zip.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..s-ime-eashared-ihds_31bf3856ad364e35_10.0.19041.1_none_e8996b7d3512363f\gay xxx several models beautyfull .avi.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\norwegian action bukkake full movie bondage .rar.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\SharedFileCache\fucking action sleeping redhair .mpg.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.ShellCommon.SharedResources\brasilian gay trambling masturbation glans .rar.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.928_none_33e0d5558cdd7c61\african trambling gang bang catfight .rar.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.1_none_2fe79eae2833b9b1\beast xxx big upskirt .mpeg.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor\canadian fetish cumshot full movie bedroom .avi.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Templates\italian cumshot horse several models .mpg.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.789_en-us_58ebf9ecc407e3c0\horse beastiality public mature .avi.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost_31bf3856ad364e35_10.0.19041.264_none_cb389cf57d74d691\action [free] black hairunshaved .mpg.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ces-ime-eashared-lm_31bf3856ad364e35_10.0.19041.1_none_3d0229d17c310f10\beastiality licking hotel .mpeg.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..se-shared-datafiles_31bf3856ad364e35_10.0.19041.1_none_2f5f00d280dce9f6\action horse [bangbus] high heels .rar.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\italian sperm uncut titts (Karin,Curtney).avi.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor.Resources\american hardcore lesbian pregnant .mpg.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\Downloads\black beast beastiality hot (!) 50+ (Janette).mpg.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\indian lingerie beastiality [bangbus] nipples .avi.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\inclusiveOobe\view\templates\danish lesbian big sweet (Janette,Sandy).rar.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-composable-sharepicker_31bf3856ad364e35_10.0.19041.1_none_c87e96327faffd0e\german handjob lesbian hidden mature (Samantha,Sarah).zip.exe e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 62 IoCs
pid Process 4476 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 4476 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 880 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 880 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 4476 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 4476 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 404 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 404 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 4476 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 4476 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 3864 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 3864 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 880 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 880 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 2796 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 2796 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 4476 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 4476 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 3444 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 3444 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 3204 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 3204 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 404 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 404 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 880 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 880 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 868 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 868 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 3864 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 3864 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 4576 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 5104 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 5104 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 4576 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 4476 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 4476 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 2796 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 2796 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 1044 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 1044 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 4360 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 4360 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 404 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 404 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 2608 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 2608 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 1448 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 1448 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 880 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 880 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 3500 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 3500 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 3444 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 3444 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 3540 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 3540 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 3204 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 3204 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 3864 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 3864 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 868 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 868 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 4476 wrote to memory of 880 4476 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 86 PID 4476 wrote to memory of 880 4476 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 86 PID 4476 wrote to memory of 880 4476 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 86 PID 4476 wrote to memory of 404 4476 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 90 PID 4476 wrote to memory of 404 4476 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 90 PID 4476 wrote to memory of 404 4476 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 90 PID 880 wrote to memory of 3864 880 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 92 PID 880 wrote to memory of 3864 880 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 92 PID 880 wrote to memory of 3864 880 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 92 PID 4476 wrote to memory of 2796 4476 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 97 PID 4476 wrote to memory of 2796 4476 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 97 PID 4476 wrote to memory of 2796 4476 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 97 PID 404 wrote to memory of 3444 404 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 98 PID 404 wrote to memory of 3444 404 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 98 PID 404 wrote to memory of 3444 404 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 98 PID 880 wrote to memory of 3204 880 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 99 PID 880 wrote to memory of 3204 880 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 99 PID 880 wrote to memory of 3204 880 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 99 PID 3864 wrote to memory of 868 3864 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 100 PID 3864 wrote to memory of 868 3864 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 100 PID 3864 wrote to memory of 868 3864 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 100 PID 4476 wrote to memory of 5104 4476 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 102 PID 4476 wrote to memory of 5104 4476 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 102 PID 4476 wrote to memory of 5104 4476 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 102 PID 2796 wrote to memory of 4576 2796 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 103 PID 2796 wrote to memory of 4576 2796 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 103 PID 2796 wrote to memory of 4576 2796 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 103 PID 404 wrote to memory of 1044 404 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 104 PID 404 wrote to memory of 1044 404 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 104 PID 404 wrote to memory of 1044 404 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 104 PID 880 wrote to memory of 4360 880 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 105 PID 880 wrote to memory of 4360 880 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 105 PID 880 wrote to memory of 4360 880 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 105 PID 3444 wrote to memory of 2608 3444 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 106 PID 3444 wrote to memory of 2608 3444 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 106 PID 3444 wrote to memory of 2608 3444 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 106 PID 3204 wrote to memory of 1448 3204 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 107 PID 3204 wrote to memory of 1448 3204 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 107 PID 3204 wrote to memory of 1448 3204 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 107 PID 3864 wrote to memory of 3500 3864 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 108 PID 3864 wrote to memory of 3500 3864 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 108 PID 3864 wrote to memory of 3500 3864 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 108 PID 868 wrote to memory of 3540 868 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 109 PID 868 wrote to memory of 3540 868 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 109 PID 868 wrote to memory of 3540 868 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 109 PID 2796 wrote to memory of 3628 2796 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 112 PID 2796 wrote to memory of 3628 2796 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 112 PID 2796 wrote to memory of 3628 2796 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 112 PID 4476 wrote to memory of 2052 4476 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 111 PID 4476 wrote to memory of 2052 4476 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 111 PID 4476 wrote to memory of 2052 4476 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 111 PID 404 wrote to memory of 3008 404 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 113 PID 404 wrote to memory of 3008 404 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 113 PID 404 wrote to memory of 3008 404 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 113 PID 5104 wrote to memory of 4468 5104 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 114 PID 5104 wrote to memory of 4468 5104 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 114 PID 5104 wrote to memory of 4468 5104 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 114 PID 3444 wrote to memory of 4556 3444 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 115 PID 3444 wrote to memory of 4556 3444 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 115 PID 3444 wrote to memory of 4556 3444 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 115 PID 3204 wrote to memory of 1372 3204 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 116 PID 3204 wrote to memory of 1372 3204 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 116 PID 3204 wrote to memory of 1372 3204 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 116 PID 880 wrote to memory of 4348 880 e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe 117
Processes
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"1⤵
- Checks computer location settings
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4476 -
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:880 -
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3864 -
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:868 -
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
PID:3540 -
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:5268
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:6320
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"8⤵PID:11764
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"8⤵PID:17248
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"8⤵PID:20876
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:6928
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"8⤵PID:11820
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"8⤵PID:17256
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"8⤵PID:4528
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:9616
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"8⤵PID:18932
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:12100
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:21764
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:5324
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:6732
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"8⤵PID:11652
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"8⤵PID:17428
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"8⤵PID:1384
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:9560
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"8⤵PID:21428
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:12276
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:16932
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:4896
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:6684
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:13944
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:17120
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:23512
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:7536
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:11908
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:17352
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:23440
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:9456
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:18204
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:12068
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:17376
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:20580
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:2256
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:6224
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:9480
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:12132
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:16788
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:21704
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:7008
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:11852
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:16772
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:20428
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:9576
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:20772
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:12284
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:17232
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:1036
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:5368
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:428
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:17028
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:21516
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:7128
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:11660
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:16972
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:1636
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:9472
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:19964
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:11556
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:17492
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:3500 -
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:5132
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:6412
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:14024
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:16892
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:20588
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:6976
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:11772
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:16996
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:20556
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:9528
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:21736
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:12244
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:17304
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:20664
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:5360
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:8740
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:21004
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:11172
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:11588
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:17532
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:6868
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:2588
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:16828
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:20368
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:7636
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:19384
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:9448
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:4388
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:17328
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:25544
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:3360
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:5240
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:9664
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:12108
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:17264
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:23520
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:7048
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:11868
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:17044
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:20392
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:9512
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:21404
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:12124
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:17184
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:23384
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:5404
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:9800
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:12372
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:17624
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:23536
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:7088
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:14584
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:16804
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:20400
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:9488
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:17660
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:23464
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:11548
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:17608
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:20244
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3204 -
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:1448 -
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:5152
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:6272
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:9544
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"8⤵PID:17900
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"8⤵PID:23480
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:12076
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:16916
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:20548
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:6920
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:13884
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:16900
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:20652
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:9784
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:11612
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:17384
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:23360
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:5340
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:7544
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:11756
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:17152
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:21532
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:9432
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:21728
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:11596
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:17436
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:23472
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:6792
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:14424
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:16836
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:20860
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:7964
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:18884
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:9424
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:21780
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:12444
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:16860
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:2280
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:1372
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:6196
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:11804
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:17092
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:23456
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:6992
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:11884
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:17020
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:20640
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:9640
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:11636
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:17516
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:23416
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:5428
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:12380
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:17144
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:10456
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:7072
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:11844
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:17192
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:2576
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:9568
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:20812
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:11968
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:17060
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:4256
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:4360 -
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:5168
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:6380
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:11740
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:17420
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:20572
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:6968
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:11900
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:21772
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:9520
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:17136
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:20604
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:12116
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:17360
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:4508
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:5332
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:7140
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:11780
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:17272
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:21844
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:9416
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:21384
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:12140
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:17336
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:23344
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:6668
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:11684
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:17004
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:7292
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:11564
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:17524
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:23432
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:9680
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:19852
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:3696
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:17344
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:20648
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"3⤵PID:4348
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:6164
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:11692
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:16796
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:20416
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:7032
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:5072
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:17076
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:4080
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:9504
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:19360
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:23504
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:11676
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:17476
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"3⤵PID:5412
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:11748
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:17400
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:11184
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"3⤵PID:7096
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:14344
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:16820
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:20228
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"3⤵PID:9592
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:20376
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"3⤵PID:11628
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"3⤵PID:17444
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:404 -
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3444 -
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:2608 -
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:5140
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:6524
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:13924
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:16868
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:20384
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:6944
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:11828
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:16764
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:20408
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:9400
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:12316
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:17312
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:23336
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:5348
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:8708
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:20672
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:11860
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:17176
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:20540
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:6676
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:11716
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:17412
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:24036
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:7568
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:11724
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:15436
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:4740
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:9464
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:17548
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:23448
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:12084
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:17484
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:4556
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:6232
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:9840
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:12340
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:17216
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:20612
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:7024
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:11892
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:17168
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:20620
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:9648
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:11580
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:17556
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:23488
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:5396
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:9724
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:20688
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:11572
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:17540
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:23528
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:7104
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:11836
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:16984
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:10360
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:9552
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:12092
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:17468
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:23400
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:1044 -
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:2180
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:6240
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:11796
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:17280
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:10700
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:7000
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:11812
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:16780
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:10696
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:9792
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:19924
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:11604
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:17460
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:20836
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:5388
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:13448
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:16964
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:21524
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:7112
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:13528
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:17128
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:20632
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:9656
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:20216
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:12300
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:17288
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:1608
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"3⤵PID:3008
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:6388
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:11948
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:16980
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:20440
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:6952
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:10844
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:12032
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:17368
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:20868
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:9440
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:18396
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:23328
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:12332
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:17224
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:2420
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"3⤵PID:5436
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:3408
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:17036
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:10344
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"3⤵PID:7064
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:11956
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:20348
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"3⤵PID:9584
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:20468
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"3⤵PID:12156
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"3⤵PID:17200
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"3⤵PID:20532
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2796 -
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4576 -
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:3932
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:6560
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:8724
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"7⤵PID:21696
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:11876
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:16948
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:624
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:6936
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:14504
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:16812
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:20432
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:9408
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:21712
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:12468
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"6⤵PID:17776
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:16884
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:5376
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:11920
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:17160
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:20564
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:7120
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:11644
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:17508
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:23424
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:9600
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:20188
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:11620
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:17500
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:23408
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"3⤵PID:3628
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:6248
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:14416
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:16844
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:21796
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:6984
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:14200
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:16852
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:20592
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:9608
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:21756
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:12252
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:17084
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:5000
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"3⤵PID:5444
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:10104
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:17068
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:23368
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"3⤵PID:7056
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:11788
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:17240
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:4160
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"3⤵PID:9624
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:21748
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"3⤵PID:12324
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"3⤵PID:17296
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:5104 -
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"3⤵PID:4468
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:6532
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:14592
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:17616
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:21508
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:6960
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:13876
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:17012
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:10472
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:9392
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"5⤵PID:19812
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:2932
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:17320
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:24040
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"3⤵PID:5420
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:11700
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:16876
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:20852
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"3⤵PID:7080
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:12476
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:16924
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:10428
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"3⤵PID:9632
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:21788
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"3⤵PID:12308
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"3⤵PID:17052
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"3⤵PID:23376
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"2⤵PID:2052
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"3⤵PID:6216
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:9496
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:11540
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:17452
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:23496
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"3⤵PID:7016
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:11928
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:16956
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:23392
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"3⤵PID:9672
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"4⤵PID:21720
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"3⤵PID:12484
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"3⤵PID:16908
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"2⤵PID:5452
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"3⤵PID:11732
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"3⤵PID:16940
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"3⤵PID:752
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"2⤵PID:7040
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"3⤵PID:11708
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"3⤵PID:17392
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"3⤵PID:23352
-
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"2⤵PID:9536
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"2⤵PID:12148
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"2⤵PID:17208
-
-
C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e058b3b7dbb86731007d4501b2532000_NeikiAnalytics.exe"2⤵PID:20844
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\norwegian action trambling full movie cock .mpeg.exe
Filesize1.3MB
MD5dcdda2ebec25c22ccd21230c4695b0dc
SHA15bf5f3432b472234a4c6f355a692ec10257b1479
SHA256505a07c2e4fe990c1d65ccbb1d1fca641522c69cc118a24a9d04ddb3419773c0
SHA5120557ce06bb279f31c130f8f9b32375d90a4fb6b5479b8683bb1efd1b279a0df73b3ca4998c1091d2485b807c3d413b10195c2ad5bdcf0c235752f61823e78f38