Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
16s -
max time network
106s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
11/05/2024, 03:17
Behavioral task
behavioral1
Sample
69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe
-
Size
295KB
-
MD5
69b3fa9178413a7842c3d639eb7e1550
-
SHA1
b334222b31de4d32aff6d7035d0d1e08278d4f76
-
SHA256
e27c452e9845ffe58aa7e09c28e81f9010562fb80fdd191eca8adb08d7a8ea73
-
SHA512
82ebc83249e58464b1df8cab2e70c93278eac77b0a5083400202e14c2da465217200951cbb9d4f0bb22b87672b889caf410bfd3404a5c1496d640a7f517e7407
-
SSDEEP
6144:YjluQoSPIo5R4nM/40yJNnwGylRAYgqiW2bwB+KPJwaGFbzmNVnQGLTt9UTs7+l2:YEQoSpqh+GyDAbqiSBbPJAF/mNV5TtaM
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 16 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
resource yara_rule behavioral2/memory/3860-0-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/files/0x000700000002341b-5.dat upx behavioral2/memory/2476-66-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1708-156-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1188-155-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4548-182-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/3516-183-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/3776-184-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1192-185-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1860-186-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4152-187-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/3332-188-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1744-190-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4212-193-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4208-192-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2476-191-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2516-196-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1708-195-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1188-194-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/3860-189-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4548-197-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2536-198-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/3516-201-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2564-208-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1424-206-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1192-209-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4948-211-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1228-210-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/756-205-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1472-204-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4552-203-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/3776-202-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2068-207-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1516-213-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1860-212-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/3148-215-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4152-214-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1032-222-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4312-221-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2020-220-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/800-219-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/3332-218-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2424-224-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1744-223-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4208-225-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4212-226-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/3496-227-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/3944-229-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/936-231-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2536-230-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2516-228-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2452-234-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4592-233-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2564-243-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2068-242-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1424-241-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1472-239-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2292-237-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/3716-236-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1252-235-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4500-232-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/756-240-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4552-238-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4696-250-0x0000000000400000-0x0000000000420000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\I: 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File opened (read-only) \??\K: 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File opened (read-only) \??\P: 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File opened (read-only) \??\R: 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File opened (read-only) \??\S: 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File opened (read-only) \??\U: 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File opened (read-only) \??\X: 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File opened (read-only) \??\G: 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File opened (read-only) \??\Y: 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File opened (read-only) \??\E: 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File opened (read-only) \??\N: 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File opened (read-only) \??\B: 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File opened (read-only) \??\J: 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File opened (read-only) \??\L: 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File opened (read-only) \??\M: 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File opened (read-only) \??\O: 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File opened (read-only) \??\V: 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File opened (read-only) \??\Z: 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File opened (read-only) \??\H: 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File opened (read-only) \??\Q: 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File opened (read-only) \??\T: 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File opened (read-only) \??\W: 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File opened (read-only) \??\A: 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe -
Drops file in System32 directory 12 IoCs
description ioc Process File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\british action hot (!) .mpeg.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\System32\DriverStore\Temp\german bukkake trambling sleeping cock stockings .avi.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\handjob bukkake [milf] .zip.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\System32\LogFiles\Fax\Incoming\french gay [free] 50+ (Kathrin,Melissa).zip.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\gay voyeur black hairunshaved .rar.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\cum cumshot voyeur nipples sweet .avi.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\brasilian sperm masturbation bondage .rar.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\spanish cumshot action hidden glans 50+ (Karin).rar.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\asian animal kicking sleeping blondie (Sonja,Curtney).avi.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\danish bukkake lesbian beautyfull .avi.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\british lesbian beastiality girls .rar.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\black beastiality cumshot [milf] .mpeg.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe -
Drops file in Program Files directory 18 IoCs
description ioc Process File created C:\Program Files\Microsoft Office\root\Templates\swedish fucking trambling [milf] leather .avi.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\Download\hardcore several models nipples (Britney).avi.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\Temp\xxx handjob licking feet penetration .mpeg.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\kicking porn several models (Curtney).mpeg.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Program Files\Common Files\microsoft shared\canadian animal lesbian hole .mpg.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Program Files\dotnet\shared\bukkake voyeur .rar.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\trambling [bangbus] .mpeg.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft SQL Server\130\Shared\handjob catfight cock .zip.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft SQL Server\130\Shared\lesbian big vagina sweet .zip.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Update\Download\african horse licking feet traffic (Tatjana).mpg.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\horse animal licking granny (Ashley).zip.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\Updates\Download\norwegian cumshot [bangbus] lady (Sonja).mpg.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\handjob lingerie [bangbus] sm (Sonja,Kathrin).mpeg.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\PrintAndShare\tyrkish fetish lesbian [bangbus] (Jenna,Samantha).zip.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Temp\norwegian handjob catfight blondie (Anniston).rar.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\horse animal [milf] .mpeg.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\tyrkish fucking [free] gorgeoushorny .mpg.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\Microsoft Shared\italian fucking gang bang masturbation circumcision (Tatjana,Britney).rar.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-ime-eashared-proxy_31bf3856ad364e35_10.0.19041.1_none_4c786ae2f508e6d5\gay blowjob [milf] penetration .rar.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_es-es_bf79b5fcc06b3128\cum catfight feet .mpg.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\tyrkish beast cum [bangbus] .mpeg.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\InputMethod\SHARED\tyrkish animal beast catfight .mpeg.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.UI.ShellCommon\SharePickerUI\brasilian fetish action lesbian girly (Jade,Anniston).avi.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.1_none_9aa486d790131d4e\kicking several models girly .mpg.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_10.0.19041.1_de-de_3d077a9cd5de5151\lesbian voyeur blondie (Janette,Jade).zip.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.844_none_855aff45853749ef\porn action masturbation cock hotel .mpg.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.746_none_1bbb9ab9fc52bac9\japanese lingerie [bangbus] young .rar.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..se-shared-datafiles_31bf3856ad364e35_10.0.19041.1_none_2f5f00d280dce9f6\asian lesbian fetish public balls (Sylvia,Jade).avi.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p..al-securitytemplate_31bf3856ad364e35_10.0.19041.1_none_a3d9a07cf2290837\black cumshot big .zip.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\CbsTemp\french animal girls cock (Jade,Jenna).zip.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.928_none_33e0d5558cdd7c61\lingerie porn [bangbus] (Tatjana).rar.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-a..gement-uevtemplates_31bf3856ad364e35_10.0.19041.1_none_0d66b54875835a49\sperm beast licking circumcision .zip.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.1_none_fa09f84703cb02c5\russian beast horse catfight (Ashley,Jade).rar.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p2p-pnrp-adm_31bf3856ad364e35_10.0.19041.1_none_ae957c4c35a7bf73\beast full movie upskirt (Tatjana,Jenna).mpeg.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_d38ece58f77171b4\danish action [milf] blondie (Liz).mpeg.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.789_en-us_58ebf9ecc407e3c0\spanish gang bang big hotel .mpg.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_c3d467c525734eb3\gay lingerie [milf] black hairunshaved (Sandy).rar.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.746_none_ab42fb092bda9182\tyrkish bukkake uncut legs .rar.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..ore-shareexperience_31bf3856ad364e35_10.0.19041.1_none_f42978969c79336a\action nude sleeping legs femdom (Liz).mpg.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\mssrv.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_de-de_881b257d159a5de8\porn public hairy .zip.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_10.0.19041.1_none_f07d4fae3e8e883f\animal lesbian nipples gorgeoushorny .mpg.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-h..public-utils-shared_31bf3856ad364e35_10.0.19041.1_none_19d22204a1f3fcaf\indian handjob lesbian mistress .avi.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-ime-eashared-ccshared_31bf3856ad364e35_10.0.19041.1_none_8c0b126c198fcf70\malaysia nude voyeur fishy .mpeg.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\assembly\tmp\blowjob hardcore catfight vagina .zip.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\Downloads\russian horse blowjob sleeping .mpeg.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.1_none_5d54c0aac5c3c12c\norwegian fetish [free] gorgeoushorny (Janette).mpg.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_62312bfbb33d478a\bukkake kicking hidden .rar.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.84_none_81616275259e37fe\cum horse licking pregnant (Gina,Sonja).zip.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_es-es_211cf1c632a13851\indian gang bang big upskirt .rar.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\Downloaded Program Files\xxx bukkake [free] (Gina).avi.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_it-it_bdb6c49fcea35732\gang bang masturbation hole ejaculation (Curtney,Sylvia).rar.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.867_en-us_49453482f1fb5356\brasilian trambling fucking masturbation .zip.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.1_none_a80cea873b2a6772\beastiality full movie .rar.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_it-it_4c5922428a6f2d08\lingerie action [milf] beautyfull .rar.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor\blowjob licking shoes .zip.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\japanese lingerie lingerie uncut balls .avi.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\danish bukkake action sleeping .mpeg.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_10.0.19041.1_none_a7ad1894592cfa12\norwegian fucking [free] (Christine).zip.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_10.0.19041.906_none_ef0e010d1381269b\african bukkake bukkake uncut ash 40+ .avi.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_10.0.19041.572_none_cf90e12518baac85\norwegian fetish girls sweet .mpg.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-manager-shared_31bf3856ad364e35_10.0.19041.153_none_e23c926e32d07dc1\russian nude public (Sarah).mpeg.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_89c0bf1761110f07\gay sleeping girly .rar.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_887b2378b7b5651d\japanese trambling sleeping bondage .avi.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost_31bf3856ad364e35_10.0.19041.1202_none_621728fcd3c9d5f6\norwegian cum bukkake [bangbus] .avi.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-m..ineshared.resources_31bf3856ad364e35_10.0.19041.1_en-us_99ddc8ce8d3d6dac\british fucking voyeur redhair .mpg.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-mccs-engineshared_31bf3856ad364e35_10.0.19041.1_none_abfc9db6c377b91f\italian handjob horse girls legs bedroom .mpeg.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-mccs-engineshared_31bf3856ad364e35_10.0.19041.746_none_d404daff82e97769\beast fetish [bangbus] fishy .zip.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\animal [bangbus] .rar.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\assembly\temp\horse horse [bangbus] (Tatjana,Jenna).rar.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_de-de_7860bee9439c3ae7\indian horse public hole 50+ (Samantha,Sonja).avi.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..nearshareexperience_31bf3856ad364e35_10.0.19041.1288_none_ca3007304990b2ea\italian cum horse masturbation young .avi.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_10.0.19041.1_none_c6da8048542fddc7\italian cumshot girls hairy .zip.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared_31bf3856ad364e35_10.0.19041.1_none_bd731e5b85dd203e\animal [bangbus] .zip.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor.Resources\russian kicking cum [milf] nipples ash (Sylvia).rar.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost_31bf3856ad364e35_10.0.19041.264_none_cb389cf57d74d691\norwegian cum voyeur .mpg.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.844_none_67b5915b5651dd8a\japanese xxx licking nipples hotel (Gina,Britney).avi.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.746_none_d01527cffa9c25bc\spanish beast voyeur traffic .mpeg.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_en-us_bfae5918c0443f83\bukkake hot (!) (Curtney,Gina).rar.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_10.0.19041.1_en-us_e5f85095c4bc5d16\african animal blowjob voyeur (Sandy,Sylvia).rar.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_10.0.19041.1_es-es_e5c3ad79c4e34ebb\russian lingerie hot (!) bondage (Britney,Sonja).avi.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Templates\norwegian horse masturbation .rar.exe 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3860 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 3860 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 2476 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 2476 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 3860 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 3860 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 1188 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 1188 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 1708 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 1708 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 2476 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 2476 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 3860 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 3860 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 4548 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 4548 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 3860 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 3516 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 3860 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 3516 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 3776 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 3776 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 1192 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 1192 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 2476 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 2476 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 1188 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 1188 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 1708 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 1708 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 1860 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 1860 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 4152 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 4152 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 3860 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 3860 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 3332 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 3332 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 4548 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 4548 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 4208 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 4208 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 1744 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 1744 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 4212 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 4212 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 2476 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 2476 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 1188 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 1708 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 1708 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 1188 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 3516 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 3516 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 2516 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 2516 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 2536 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 2536 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 3776 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 3776 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 1192 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 1192 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 1424 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 1424 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 3860 wrote to memory of 2476 3860 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 86 PID 3860 wrote to memory of 2476 3860 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 86 PID 3860 wrote to memory of 2476 3860 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 86 PID 2476 wrote to memory of 1188 2476 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 88 PID 2476 wrote to memory of 1188 2476 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 88 PID 2476 wrote to memory of 1188 2476 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 88 PID 3860 wrote to memory of 1708 3860 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 89 PID 3860 wrote to memory of 1708 3860 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 89 PID 3860 wrote to memory of 1708 3860 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 89 PID 3860 wrote to memory of 4548 3860 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 90 PID 3860 wrote to memory of 4548 3860 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 90 PID 3860 wrote to memory of 4548 3860 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 90 PID 2476 wrote to memory of 3516 2476 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 91 PID 2476 wrote to memory of 3516 2476 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 91 PID 2476 wrote to memory of 3516 2476 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 91 PID 1188 wrote to memory of 3776 1188 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 92 PID 1188 wrote to memory of 3776 1188 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 92 PID 1188 wrote to memory of 3776 1188 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 92 PID 1708 wrote to memory of 1192 1708 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 93 PID 1708 wrote to memory of 1192 1708 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 93 PID 1708 wrote to memory of 1192 1708 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 93 PID 3860 wrote to memory of 1860 3860 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 94 PID 3860 wrote to memory of 1860 3860 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 94 PID 3860 wrote to memory of 1860 3860 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 94 PID 4548 wrote to memory of 4152 4548 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 95 PID 4548 wrote to memory of 4152 4548 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 95 PID 4548 wrote to memory of 4152 4548 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 95 PID 2476 wrote to memory of 3332 2476 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 96 PID 2476 wrote to memory of 3332 2476 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 96 PID 2476 wrote to memory of 3332 2476 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 96 PID 1188 wrote to memory of 4212 1188 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 97 PID 1188 wrote to memory of 4212 1188 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 97 PID 1188 wrote to memory of 4212 1188 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 97 PID 1708 wrote to memory of 1744 1708 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 98 PID 1708 wrote to memory of 1744 1708 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 98 PID 1708 wrote to memory of 1744 1708 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 98 PID 3516 wrote to memory of 4208 3516 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 99 PID 3516 wrote to memory of 4208 3516 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 99 PID 3516 wrote to memory of 4208 3516 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 99 PID 3776 wrote to memory of 2516 3776 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 100 PID 3776 wrote to memory of 2516 3776 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 100 PID 3776 wrote to memory of 2516 3776 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 100 PID 1192 wrote to memory of 2536 1192 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 101 PID 1192 wrote to memory of 2536 1192 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 101 PID 1192 wrote to memory of 2536 1192 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 101 PID 1192 wrote to memory of 4552 1192 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 102 PID 1192 wrote to memory of 4552 1192 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 102 PID 1192 wrote to memory of 4552 1192 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 102 PID 3776 wrote to memory of 1228 3776 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 103 PID 3776 wrote to memory of 1228 3776 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 103 PID 3776 wrote to memory of 1228 3776 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 103 PID 3516 wrote to memory of 1472 3516 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 104 PID 3516 wrote to memory of 1472 3516 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 104 PID 3516 wrote to memory of 1472 3516 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 104 PID 1188 wrote to memory of 756 1188 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 105 PID 1188 wrote to memory of 756 1188 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 105 PID 1188 wrote to memory of 756 1188 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 105 PID 2476 wrote to memory of 1424 2476 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 106 PID 2476 wrote to memory of 1424 2476 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 106 PID 2476 wrote to memory of 1424 2476 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 106 PID 1708 wrote to memory of 4948 1708 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 107 PID 1708 wrote to memory of 4948 1708 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 107 PID 1708 wrote to memory of 4948 1708 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 107 PID 4548 wrote to memory of 2068 4548 69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe 108
Processes
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"1⤵
- Checks computer location settings
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3860 -
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2476 -
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1188 -
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3776 -
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:2516 -
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:2020
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"7⤵PID:5772
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"8⤵PID:9852
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"8⤵PID:10892
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"8⤵PID:16088
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"8⤵PID:20556
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"7⤵PID:7176
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"8⤵PID:17212
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"8⤵PID:21860
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"7⤵PID:11392
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"7⤵PID:15960
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"7⤵PID:20660
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:5344
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"7⤵PID:8400
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"7⤵PID:11196
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"7⤵PID:16024
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"7⤵PID:20644
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:6776
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"7⤵PID:17124
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"7⤵PID:21748
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:9328
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:11156
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:15896
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:8760
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:1228
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:2964
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"7⤵PID:8568
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"8⤵PID:16604
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"8⤵PID:20864
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"7⤵PID:11252
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"7⤵PID:15736
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"7⤵PID:20892
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:6408
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"7⤵PID:15600
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"7⤵PID:2140
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:8444
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"7⤵PID:17332
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"7⤵PID:21892
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:3928
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:16040
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:20652
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:4500
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:7384
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"7⤵PID:17140
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"7⤵PID:23008
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:11368
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:16000
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:21320
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:5964
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:2984
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:16184
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:10232
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:7456
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:17276
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:21844
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:10932
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:15768
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:22952
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4212 -
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:1516
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:5796
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"7⤵PID:9796
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"7⤵PID:11104
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"7⤵PID:15656
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"7⤵PID:22708
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:7368
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"7⤵PID:17220
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"7⤵PID:21804
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:11408
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:15864
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:10168
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:2624
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:8560
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"7⤵PID:17132
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"7⤵PID:21764
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:11260
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:16048
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:20988
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:6288
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:1848
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:16128
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:22700
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:8460
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:17284
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:21952
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:10884
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:15608
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:9384
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:756
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:5756
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:9068
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:11188
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:16200
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:21168
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:7208
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:17348
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:21900
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:11376
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:15968
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:20516
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:936
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:6604
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:4544
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:22980
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:9116
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:11220
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:16112
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:20856
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:6136
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:10876
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:15840
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:10060
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:7788
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:17180
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:21796
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:11280
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:16016
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:20580
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3516 -
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4208 -
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:3148
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:5888
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"7⤵PID:9804
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"7⤵PID:10868
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"7⤵PID:15640
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"7⤵PID:21300
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:7216
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"7⤵PID:17308
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"7⤵PID:21544
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:11384
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:15648
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:9988
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:5204
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:8732
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"7⤵PID:17316
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"7⤵PID:21884
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:11244
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:16104
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:9444
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:6792
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:17196
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:21836
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:9300
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:11180
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:15912
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:8668
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:1472
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:5372
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:8620
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"7⤵PID:17228
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"7⤵PID:21852
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:8576
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:16120
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:9448
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:6784
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:16776
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:9480
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:11128
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:15800
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:9748
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:2292
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:7520
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:17268
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:21828
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:11336
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:15680
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:9268
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:5132
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:10212
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:11048
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:15784
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:9744
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:7980
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:17324
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:23016
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:11272
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:15672
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:1176
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:3332 -
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:2424
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:5912
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:10204
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:11032
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:15664
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:9904
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:7376
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:17236
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:21552
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:11344
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:16064
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:21068
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:5360
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:8900
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:17148
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:21772
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:11236
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:16152
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:22400
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:6800
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:17340
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:22836
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:9472
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:10940
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:15776
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:9608
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:1424 -
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:4696
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:8056
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:17076
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:9388
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:10848
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:16160
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:21516
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:6244
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:12752
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:15720
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:10164
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:8316
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:17040
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:21560
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:3784
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:16136
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:20572
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵PID:3944
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:7044
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:17108
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:21740
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:10140
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:11040
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:15928
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:8784
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵PID:6076
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:10104
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:11056
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:15824
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:9676
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵PID:7692
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:17204
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:21920
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵PID:11304
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵PID:16072
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵PID:21004
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1708 -
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1192 -
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:2536 -
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:4312
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:5924
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"7⤵PID:9996
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"7⤵PID:11096
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"7⤵PID:15728
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"7⤵PID:9340
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:7596
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"7⤵PID:17388
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"7⤵PID:22844
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:11328
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:15624
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:8864
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:5212
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:8580
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"7⤵PID:17300
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"7⤵PID:21908
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:4004
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:15712
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:10024
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:6872
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:17100
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:23024
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:9404
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:11148
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:16224
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:22408
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:4552
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:4172
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:7932
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"7⤵PID:17404
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:11288
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:16056
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:20956
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:6424
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:11904
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:15888
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:22744
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:8468
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:17116
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:21756
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:3008
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:16168
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:22384
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:4592
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:6940
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:17396
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:22852
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:9512
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:11140
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:16216
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:21336
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:5972
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:10856
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:15872
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:22736
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:6320
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:16768
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:22960
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:10836
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:15616
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:9960
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:1744 -
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:800
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:5896
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:9540
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:10948
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:15744
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:9504
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:7284
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:17292
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:21876
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:11352
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:15848
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:20540
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:5316
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:8532
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:17688
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:22820
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:2120
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:16144
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:22392
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:6552
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:17260
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:21812
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:8952
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:10908
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:15752
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:9588
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵PID:4948
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:5284
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:8780
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:11212
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:15632
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:9080
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:6756
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:17244
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:20804
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:9272
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:11172
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:16192
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:20524
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵PID:3716
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:6964
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:17188
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:21868
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:10076
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:11080
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:15792
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:9868
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵PID:5440
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:5004
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:15984
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:20532
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵PID:8136
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:17356
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:21936
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵PID:10820
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵PID:16008
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵PID:20564
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4548 -
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4152 -
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:1032
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:5904
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:9520
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:10900
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:15944
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:20500
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:7484
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:17032
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"6⤵PID:21568
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:11312
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:16176
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:21012
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:5352
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:9176
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:11204
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:15688
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:10188
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:6748
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:17048
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:22752
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:9320
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:11164
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:16096
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:22364
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵PID:2068
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:5380
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:9664
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:10924
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:16208
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:20996
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:6356
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:17380
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:21928
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:11416
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:15992
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:20872
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵PID:1252
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:7036
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:4348
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:22968
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:10052
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:11064
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:15816
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:21536
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵PID:5592
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:11400
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:15936
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:20492
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵PID:8156
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:17164
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:22808
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵PID:10916
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵PID:15696
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵PID:8696
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:1860 -
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵PID:3496
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:6088
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:9656
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:11112
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:15808
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:9768
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:7684
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:17252
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:21820
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:11320
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:15976
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:20636
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵PID:5484
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:8924
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:11928
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:15880
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"5⤵PID:21508
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:11228
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:16080
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:20548
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵PID:6956
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:17364
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:21944
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵PID:10004
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵PID:11088
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵PID:15832
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵PID:9860
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"2⤵PID:2564
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵PID:5716
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:9720
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:11120
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:15760
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:9572
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵PID:7004
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:17372
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:22828
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵PID:11360
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵PID:15952
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵PID:20508
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"2⤵PID:2452
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵PID:7780
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:17172
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"4⤵PID:21780
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵PID:11296
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵PID:15856
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵PID:22716
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"2⤵PID:5804
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵PID:10012
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵PID:11072
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵PID:15920
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵PID:20484
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"2⤵PID:8044
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵PID:17156
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"3⤵PID:21788
-
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"2⤵PID:2388
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"2⤵PID:16032
-
-
C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\69b3fa9178413a7842c3d639eb7e1550_NeikiAnalytics.exe"2⤵PID:21292
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\horse animal licking granny (Ashley).zip.exe
Filesize912KB
MD509e69710bd89202b5c96be54c61838e5
SHA1051a31a7b9eea0165895f3bac543bbe6237d6c08
SHA25609e471bc6e49f49e646bd632aac2a6b4688f4240820c640a8719a7658b6aac8c
SHA5122d6d16d370fa9467ca2cf2f13bc8416d9536d3dda371500413290912843c33e328b10b95dac3e43837ebe7a106f0a7f0694845c799bfea1df72f5a3175ece291