Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
14s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
11/05/2024, 00:16
Behavioral task
behavioral1
Sample
38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe
-
Size
2.0MB
-
MD5
38eecf1b9ad18f4dcecc04106cea0170
-
SHA1
5cb221155650b0a6a0daaf4e02739a79eff97c82
-
SHA256
e2b6af273a26564ec310d987afa26a78b13f62fe67cae1b7f3d64cb54cbef79a
-
SHA512
7bd608e013949bfe38453f6fee2978a681b7d6bb482e98b999a5959422e8a1b8e214b3d7db00d72c58e32534bba81436c410514a99155145c4da2ceb5c2d65a9
-
SSDEEP
49152:dsoVvvyOkQEKU7Xoo/B0+44SynN6TtqG0zxjmgk9n3:dtvKOk5osmqnN6ZqNxte3
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 16 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\Control Panel\International\Geo\Nation 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
resource yara_rule behavioral2/memory/5076-0-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/files/0x00070000000233f7-5.dat upx behavioral2/memory/3048-22-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4124-149-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2920-151-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2128-170-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/644-172-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2944-185-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1376-186-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/3872-188-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/5076-187-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/624-191-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1492-190-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/3048-189-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4124-192-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2920-193-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/3140-194-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/5100-197-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2128-196-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/5076-195-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/644-198-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/536-200-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1272-199-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2188-204-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2940-203-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2936-202-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2032-201-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1376-206-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2944-205-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2392-208-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1584-207-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/5032-210-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/3872-209-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/624-212-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1492-211-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2112-213-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1572-215-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/5100-216-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/3140-214-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/3000-217-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/536-221-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2188-237-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2940-236-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1884-235-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/432-234-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1148-233-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/832-232-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4012-231-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1804-230-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4880-229-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/3496-240-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1584-239-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/3128-238-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2096-242-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4692-241-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2192-228-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/3388-227-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/3392-226-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2416-225-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/5084-224-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/3552-223-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/808-222-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/5032-243-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4340-245-0x0000000000400000-0x0000000000420000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\R: 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File opened (read-only) \??\B: 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File opened (read-only) \??\N: 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File opened (read-only) \??\O: 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File opened (read-only) \??\M: 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File opened (read-only) \??\S: 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File opened (read-only) \??\T: 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File opened (read-only) \??\W: 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File opened (read-only) \??\Z: 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File opened (read-only) \??\G: 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File opened (read-only) \??\H: 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File opened (read-only) \??\I: 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File opened (read-only) \??\X: 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File opened (read-only) \??\Y: 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File opened (read-only) \??\K: 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File opened (read-only) \??\P: 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File opened (read-only) \??\Q: 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File opened (read-only) \??\L: 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File opened (read-only) \??\U: 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File opened (read-only) \??\V: 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File opened (read-only) \??\A: 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File opened (read-only) \??\E: 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File opened (read-only) \??\J: 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe -
Drops file in System32 directory 12 IoCs
description ioc Process File created C:\Windows\System32\LogFiles\Fax\Incoming\black cum horse [free] glans (Christine,Karin).mpg.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\xxx voyeur .mpg.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\swedish action beast hidden feet boots .avi.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\System32\DriverStore\Temp\japanese horse lesbian lesbian .zip.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\chinese trambling masturbation titts .avi.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\italian horse horse lesbian hairy (Britney,Sarah).rar.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\american handjob trambling uncut (Sylvia).mpeg.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\italian beastiality horse voyeur .avi.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\swedish kicking hardcore [free] hole bedroom (Curtney).avi.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\american kicking horse uncut (Janette).mpg.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\beast [bangbus] cock circumcision (Curtney).mpeg.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\xxx lesbian cock .avi.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe -
Drops file in Program Files directory 17 IoCs
description ioc Process File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft SQL Server\130\Shared\italian beastiality blowjob big glans .mpg.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\trambling uncut feet mistress .avi.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\PrintAndShare\horse sleeping (Tatjana).rar.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Program Files\dotnet\shared\brasilian nude gay [free] .avi.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\tyrkish animal fucking hot (!) titts penetration .mpg.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\italian cum gay lesbian titts .avi.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\Microsoft Shared\gay licking hole gorgeoushorny (Janette).mpg.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\Templates\italian handjob fucking big latex .rar.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft SQL Server\130\Shared\russian beastiality hardcore masturbation .mpg.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\kicking blowjob [bangbus] girly (Gina,Janette).rar.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\Download\trambling catfight lady .zip.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\sperm sleeping titts (Christine,Samantha).mpg.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Program Files\Common Files\microsoft shared\bukkake sleeping mature (Christine,Sarah).rar.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\Updates\Download\indian horse gay [milf] titts .mpg.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\brasilian handjob blowjob sleeping redhair (Sonja,Samantha).mpeg.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Temp\japanese porn sperm full movie feet .avi.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Update\Download\beast licking feet .zip.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\horse public bedroom .zip.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.1_none_5d54c0aac5c3c12c\japanese fetish beast licking feet .avi.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.867_none_c29826784f9429f8\cum trambling sleeping hole .mpg.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-a..gement-uevtemplates_31bf3856ad364e35_10.0.19041.1_none_0d66b54875835a49\french gay [bangbus] feet shoes .avi.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-ime-eashared-proxy_31bf3856ad364e35_10.0.19041.1_none_4c786ae2f508e6d5\french hardcore hidden cock .mpg.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.1_none_f3b35d713ce0fc7f\norwegian trambling licking latex .avi.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.1_none_2fe79eae2833b9b1\spanish blowjob voyeur .zip.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\brasilian horse lingerie catfight castration .mpg.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_en-us_310bfb76047869ad\tyrkish handjob fucking hot (!) feet swallow .mpg.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_es-es_30d7585a049f5b52\cum trambling hidden .avi.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_it-it_bdb6c49fcea35732\swedish animal beast several models cock bedroom (Tatjana).zip.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..s-ime-eashared-ihds_31bf3856ad364e35_10.0.19041.1_none_e8996b7d3512363f\horse big hole .zip.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.844_none_855aff45853749ef\danish cumshot horse licking .zip.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.844_none_57eddd48e7a74274\fetish bukkake [free] feet ash .mpg.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\mssrv.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\indian animal lesbian catfight .mpeg.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Templates\tyrkish cum fucking voyeur cock sweet (Liz).mpeg.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_en-us_215194e2327a46ac\german hardcore voyeur .mpg.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_10.0.19041.1_none_f07d4fae3e8e883f\british lingerie hot (!) (Sarah).avi.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\indian fetish bukkake [milf] feet (Anniston,Jade).rar.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_es-es_211cf1c632a13851\gang bang xxx full movie .mpeg.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost_31bf3856ad364e35_10.0.19041.1202_none_621728fcd3c9d5f6\black kicking bukkake several models hole high heels .zip.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.1_none_a80cea873b2a6772\fetish gay big (Jade).mpeg.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\Downloads\american cum gay voyeur bedroom .avi.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.84_none_81616275259e37fe\german bukkake voyeur hole (Ashley,Tatjana).mpg.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost_31bf3856ad364e35_10.0.19041.264_none_cb389cf57d74d691\nude sperm licking (Janette).mpeg.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.844_none_67b5915b5651dd8a\xxx [bangbus] cock leather .mpg.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\assembly\temp\indian kicking horse masturbation hotel .mpeg.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\security\templates\brasilian fetish lesbian masturbation glans boots (Liz).avi.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.UI.ShellCommon\SharePickerUI\japanese nude trambling girls (Tatjana).mpg.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.867_en-us_49453482f1fb5356\sperm [bangbus] feet bedroom .mpg.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5fdc43acc1be690d\kicking trambling several models hotel .mpg.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\CbsTemp\trambling catfight high heels (Ashley,Samantha).rar.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\InputMethod\SHARED\russian horse trambling licking (Karin).zip.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor\black action bukkake [free] cock stockings (Tatjana).avi.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5021dd18efc0460c\russian kicking lingerie [bangbus] lady .zip.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.1_none_9aa486d790131d4e\bukkake hidden glans beautyfull .zip.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\Downloaded Program Files\trambling licking cock (Christine,Melissa).zip.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_uk-ua_5b152a8d329397ec\italian fetish lesbian big fishy .rar.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.789_en-us_58ebf9ecc407e3c0\xxx girls girly .mpg.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.746_none_d01527cffa9c25bc\spanish fucking sleeping mistress (Sonja,Melissa).zip.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\bukkake big .mpeg.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\SharedFileCache\brasilian horse bukkake lesbian cock .avi.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_d38ece58f77171b4\gang bang lingerie [milf] shower .rar.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.746_none_2212358fc33cc10f\swedish gang bang blowjob sleeping boots .zip.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..se-shared-datafiles_31bf3856ad364e35_10.0.19041.1_none_2f5f00d280dce9f6\russian kicking hardcore [free] high heels .mpg.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Templates\sperm public 40+ .mpeg.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_de-de_7860bee9439c3ae7\indian cum sperm [milf] (Janette).zip.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.1_none_833abdc06c68d338\black cum lingerie catfight latex (Jenna,Tatjana).mpg.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.1_none_fa09f84703cb02c5\cumshot sperm masturbation cock .avi.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\assembly\tmp\italian nude lesbian sleeping cock circumcision .zip.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor\bukkake girls (Sylvia).zip.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor.Resources\tyrkish cum gay sleeping 50+ .mpeg.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\Downloads\italian horse lingerie big (Jade).avi.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_de-de_881b257d159a5de8\danish cumshot lesbian sleeping black hairunshaved .mpeg.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.746_none_1bbb9ab9fc52bac9\italian handjob beast [free] cock balls .avi.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\japanese animal gay [bangbus] cock balls (Samantha).mpeg.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.ShellCommon.SharedResources\swedish action gay uncut .mpg.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor.Resources\indian fetish lesbian uncut (Jade).mpeg.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\templates\japanese kicking hardcore sleeping 40+ .zip.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.746_none_ab42fb092bda9182\gang bang lingerie licking lady .zip.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-composable-sharepicker_31bf3856ad364e35_10.0.19041.1_none_c87e96327faffd0e\animal gay hot (!) sm .mpeg.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-b..-bcdtemplate-client_31bf3856ad364e35_10.0.19041.1_none_de1581e9a275faf8\french fucking uncut feet .rar.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ces-ime-eashared-lm_31bf3856ad364e35_10.0.19041.1_none_3d0229d17c310f10\kicking trambling sleeping (Sarah).mpg.exe 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 5076 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 5076 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 3048 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 3048 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 5076 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 5076 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 4124 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 4124 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 2920 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 2920 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 5076 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 5076 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 3048 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 3048 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 2128 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 2128 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 644 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 644 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 5076 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 5076 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 4124 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 4124 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 1272 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 1272 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 2032 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 2032 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 3048 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 3048 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 2920 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 2920 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 2944 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 2944 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 1376 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 1376 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 5076 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 5076 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 4124 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 4124 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 3872 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 3872 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 2392 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 2392 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 624 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 624 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 2128 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 2128 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 1492 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 1492 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 644 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 644 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 3048 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 3048 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 3140 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 3140 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 2112 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 2112 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 1272 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 2920 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 1272 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 2920 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 2032 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 2032 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 5100 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 5100 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 5076 wrote to memory of 3048 5076 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 83 PID 5076 wrote to memory of 3048 5076 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 83 PID 5076 wrote to memory of 3048 5076 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 83 PID 5076 wrote to memory of 4124 5076 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 84 PID 5076 wrote to memory of 4124 5076 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 84 PID 5076 wrote to memory of 4124 5076 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 84 PID 3048 wrote to memory of 2920 3048 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 85 PID 3048 wrote to memory of 2920 3048 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 85 PID 3048 wrote to memory of 2920 3048 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 85 PID 5076 wrote to memory of 2128 5076 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 86 PID 5076 wrote to memory of 2128 5076 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 86 PID 5076 wrote to memory of 2128 5076 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 86 PID 4124 wrote to memory of 644 4124 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 87 PID 4124 wrote to memory of 644 4124 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 87 PID 4124 wrote to memory of 644 4124 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 87 PID 3048 wrote to memory of 1272 3048 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 88 PID 3048 wrote to memory of 1272 3048 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 88 PID 3048 wrote to memory of 1272 3048 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 88 PID 2920 wrote to memory of 2032 2920 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 89 PID 2920 wrote to memory of 2032 2920 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 89 PID 2920 wrote to memory of 2032 2920 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 89 PID 5076 wrote to memory of 2944 5076 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 90 PID 5076 wrote to memory of 2944 5076 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 90 PID 5076 wrote to memory of 2944 5076 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 90 PID 4124 wrote to memory of 1376 4124 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 91 PID 4124 wrote to memory of 1376 4124 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 91 PID 4124 wrote to memory of 1376 4124 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 91 PID 2128 wrote to memory of 2392 2128 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 92 PID 2128 wrote to memory of 2392 2128 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 92 PID 2128 wrote to memory of 2392 2128 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 92 PID 644 wrote to memory of 3872 644 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 93 PID 644 wrote to memory of 3872 644 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 93 PID 644 wrote to memory of 3872 644 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 93 PID 3048 wrote to memory of 1492 3048 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 94 PID 3048 wrote to memory of 1492 3048 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 94 PID 3048 wrote to memory of 1492 3048 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 94 PID 2920 wrote to memory of 624 2920 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 95 PID 2920 wrote to memory of 624 2920 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 95 PID 2920 wrote to memory of 624 2920 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 95 PID 1272 wrote to memory of 2112 1272 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 96 PID 1272 wrote to memory of 2112 1272 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 96 PID 1272 wrote to memory of 2112 1272 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 96 PID 2032 wrote to memory of 3140 2032 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 97 PID 2032 wrote to memory of 3140 2032 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 97 PID 2032 wrote to memory of 3140 2032 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 97 PID 5076 wrote to memory of 5100 5076 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 98 PID 5076 wrote to memory of 5100 5076 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 98 PID 5076 wrote to memory of 5100 5076 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 98 PID 4124 wrote to memory of 3000 4124 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 99 PID 4124 wrote to memory of 3000 4124 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 99 PID 4124 wrote to memory of 3000 4124 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 99 PID 2128 wrote to memory of 536 2128 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 100 PID 2128 wrote to memory of 536 2128 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 100 PID 2128 wrote to memory of 536 2128 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 100 PID 2944 wrote to memory of 2936 2944 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 101 PID 2944 wrote to memory of 2936 2944 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 101 PID 2944 wrote to memory of 2936 2944 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 101 PID 644 wrote to memory of 2940 644 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 102 PID 644 wrote to memory of 2940 644 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 102 PID 644 wrote to memory of 2940 644 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 102 PID 3048 wrote to memory of 2188 3048 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 103 PID 3048 wrote to memory of 2188 3048 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 103 PID 3048 wrote to memory of 2188 3048 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 103 PID 2920 wrote to memory of 3128 2920 38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe 104
Processes
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"1⤵
- Checks computer location settings
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:5076 -
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3048 -
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2920 -
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2032 -
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:3140 -
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:2332
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"7⤵PID:5408
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"8⤵PID:9808
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"9⤵PID:4424
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"9⤵PID:17344
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"8⤵PID:12976
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"8⤵PID:17448
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"7⤵PID:6656
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"8⤵PID:19864
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"7⤵PID:6756
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"8⤵PID:20216
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"7⤵PID:11208
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"7⤵PID:12792
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"7⤵PID:15516
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:808
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"7⤵PID:7048
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"8⤵PID:20788
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"7⤵PID:8184
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"7⤵PID:10976
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"7⤵PID:12768
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"7⤵PID:17200
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:6052
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"7⤵PID:10616
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"7⤵PID:12912
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"7⤵PID:64
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:8000
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"7⤵PID:19756
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:13216
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:4932
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:1584
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:5584
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"7⤵PID:11284
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"7⤵PID:13336
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"7⤵PID:17896
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:7120
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"7⤵PID:17152
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:8112
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:13096
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:16944
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:3388
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:7144
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"7⤵PID:19880
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:8008
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:10368
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:12952
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:17860
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:2028
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:11300
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:12680
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:15088
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:22368
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:7448
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:5644
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:13224
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:18388
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:624 -
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:1572
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:5544
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"7⤵PID:13288
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"7⤵PID:1480
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:7072
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"7⤵PID:19848
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:8152
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"7⤵PID:19764
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:13120
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:15584
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:5084
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:8292
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"7⤵PID:15760
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:11248
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:12856
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:15588
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:6044
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:9700
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"7⤵PID:15752
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:12984
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:3080
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:6984
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:16548
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:13152
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:5436
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:3128
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:5592
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:11188
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:12816
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:17384
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:7104
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:13344
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:5676
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:8056
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:10984
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:12696
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:17376
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:1148
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:4028
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:19800
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:8072
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:20208
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:13248
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:19088
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:5980
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:10384
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:12928
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:17192
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:8212
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:6232
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:13136
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:17208
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1272 -
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:2112 -
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:3756
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:5420
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"7⤵PID:9528
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"7⤵PID:12992
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"7⤵PID:17440
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:6640
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"7⤵PID:17368
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:6024
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"7⤵PID:15448
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:10960
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:12896
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:17328
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:4012
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:6964
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"7⤵PID:20200
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:8024
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:10908
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:12880
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:17464
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:5972
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:10376
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:12936
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:17216
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:6080
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:19840
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:11240
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:12760
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:15928
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:5032
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:5516
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:10676
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:12900
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:17240
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:7136
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:8120
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:20252
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:11196
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:12656
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:16744
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:832
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:9420
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:17176
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:13024
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:17480
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:6064
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:13000
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:18396
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:7440
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:19792
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:11216
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:12800
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:17352
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:1492 -
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:4340
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:5536
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:11008
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:12848
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:2156
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:7080
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:7936
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:8176
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:16668
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:13232
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:18204
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:1804
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:6592
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:17184
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:8080
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:10736
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:12664
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:16760
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:5916
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:10436
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:12940
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:17880
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:7508
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:19856
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:8064
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:10968
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:13032
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:17424
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"3⤵PID:2188
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:5612
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:10868
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:12784
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:17392
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:7128
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:16776
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:8144
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:16784
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:13176
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:17904
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"3⤵PID:432
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:7184
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:17140
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:8088
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:16584
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:13192
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:17688
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"3⤵PID:4796
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:10488
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:12832
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:18404
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"3⤵PID:7572
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:19480
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"3⤵PID:13240
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"3⤵PID:17868
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4124 -
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:644 -
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:3872 -
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:1984
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:5560
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"7⤵PID:11276
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"7⤵PID:12712
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"7⤵PID:17336
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:6020
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"7⤵PID:20052
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:8136
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"7⤵PID:19808
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:13128
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:4552
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:2416
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:6236
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:8104
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"7⤵PID:19120
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:11036
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:13328
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:5460
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:6072
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:13456
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:16104
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:7564
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:13184
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:17500
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:2940
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:5664
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:11000
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:12824
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:1176
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:6240
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:2552
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:8128
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:13200
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:17848
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:2192
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:8284
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:11232
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:12776
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:17232
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:3088
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:10264
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:12968
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:17472
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:7432
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:19784
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:11292
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:12728
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:17416
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:1376 -
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:4692
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:5492
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:10548
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:12736
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:15936
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:6036
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:21236
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:6752
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:16608
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:13104
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:17456
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:3392
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:3596
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:19872
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:8096
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:19496
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:13088
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:1392
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:2168
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:13208
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:18000
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:7424
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:16592
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:11224
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:12840
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:5092
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"3⤵PID:3000
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:5528
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:10992
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:12628
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:16752
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:7112
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:19824
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:8160
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:13160
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:17248
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"3⤵PID:3496
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:9232
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:5568
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:12636
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:17972
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"3⤵PID:6360
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:13112
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:17224
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"3⤵PID:7216
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:19400
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"3⤵PID:10932
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"3⤵PID:12872
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"3⤵PID:4172
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2128 -
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:2392 -
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:4684
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:5500
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:11148
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:13384
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:5860
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:7088
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:4580
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:8168
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:4996
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:13168
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:3148
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:3552
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:6560
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:6152
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:7212
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"6⤵PID:19488
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:10952
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:12704
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:17360
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:6096
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:11268
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:12720
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:17400
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:8016
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:6476
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:10820
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:12864
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:3868
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"3⤵PID:536
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:5508
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:10284
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:12688
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:16768
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:7096
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:19832
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:8040
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:16600
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:10860
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:12888
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:2360
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"3⤵PID:1884
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:9436
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:15560
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:12620
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:17888
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"3⤵PID:6088
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:10272
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:12960
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:17104
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"3⤵PID:8004
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:20928
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"3⤵PID:13048
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"3⤵PID:19080
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2944 -
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"3⤵PID:2936
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:5600
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:13080
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:3716
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:7152
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:16848
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:8048
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:12108
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:11256
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:13040
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:17432
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"3⤵PID:4880
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:8804
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"5⤵PID:6224
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:13008
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:17488
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"3⤵PID:6104
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:10428
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:12920
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:15728
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"3⤵PID:7416
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"3⤵PID:13144
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"3⤵PID:2924
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
PID:5100 -
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"3⤵PID:5552
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:164
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:12644
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:16840
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"3⤵PID:5968
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:17168
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"3⤵PID:8032
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"3⤵PID:10944
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"3⤵PID:12808
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"3⤵PID:19096
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"2⤵PID:2096
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"3⤵PID:9220
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"4⤵PID:17160
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"3⤵PID:13016
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"3⤵PID:17676
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"2⤵PID:6440
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"3⤵PID:20920
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"2⤵PID:7220
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"3⤵PID:19816
-
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"2⤵PID:11356
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"2⤵PID:12672
-
-
C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\38eecf1b9ad18f4dcecc04106cea0170_NeikiAnalytics.exe"2⤵PID:2100
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\tyrkish animal fucking hot (!) titts penetration .mpg.exe
Filesize535KB
MD5a922bc5da117644a66d3d8bf41de42b5
SHA17eff4ce49bcf00ebcd27bd47c755b81966054cbf
SHA2562da8459ce6d82305a92fc2c9b6a90a9b42a20af7b104b95acc39372e24408b18
SHA512c2b1baf5de815df926940c818801a82faebc09cb24dd290e49910a2b39c0392f05b0bde6851bcb4665cdf7e3aba538d7175cf698d0ea75209568a19d48501564