Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
14s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
11/05/2024, 10:15
Behavioral task
behavioral1
Sample
ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe
-
Size
742KB
-
MD5
ac6781f97363c802ba8cca39c5eba2d0
-
SHA1
b0d3ac4466dcd47756fbc518c6ef3b1a8e4c0d88
-
SHA256
d71820db034bae1c8daa9f820f0d12522b3c5600ed7077c1b0d6436696d1cbb3
-
SHA512
c7e162c1edae7e42b176b59e654f0f565080ece9ff5cf68aeb4fc68317601908c83dfca17030c13666020e1191034020abd1b4af5a4be7c9f81d5a700b86b60f
-
SSDEEP
12288:YEQoSpqh0iVE08z2viaKVjfYIzc6Zwmpg/pRu7DC4HKL/6Y23TqxGKVPBXVNvPe:Yi0oE08yviZYIzc69u/pRqu9/V2DqxG7
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 16 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-4018855536-2201274732-320770143-1000\Control Panel\International\Geo\Nation ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4018855536-2201274732-320770143-1000\Control Panel\International\Geo\Nation ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4018855536-2201274732-320770143-1000\Control Panel\International\Geo\Nation ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4018855536-2201274732-320770143-1000\Control Panel\International\Geo\Nation ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4018855536-2201274732-320770143-1000\Control Panel\International\Geo\Nation ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4018855536-2201274732-320770143-1000\Control Panel\International\Geo\Nation ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4018855536-2201274732-320770143-1000\Control Panel\International\Geo\Nation ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4018855536-2201274732-320770143-1000\Control Panel\International\Geo\Nation ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4018855536-2201274732-320770143-1000\Control Panel\International\Geo\Nation ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4018855536-2201274732-320770143-1000\Control Panel\International\Geo\Nation ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4018855536-2201274732-320770143-1000\Control Panel\International\Geo\Nation ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4018855536-2201274732-320770143-1000\Control Panel\International\Geo\Nation ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4018855536-2201274732-320770143-1000\Control Panel\International\Geo\Nation ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4018855536-2201274732-320770143-1000\Control Panel\International\Geo\Nation ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4018855536-2201274732-320770143-1000\Control Panel\International\Geo\Nation ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4018855536-2201274732-320770143-1000\Control Panel\International\Geo\Nation ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
resource yara_rule behavioral2/memory/4364-0-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/files/0x0003000000022986-5.dat upx behavioral2/memory/2592-19-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1156-154-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4116-177-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4112-183-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/3144-187-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4944-188-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4260-189-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4644-190-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4124-192-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4364-191-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1452-194-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2592-193-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1156-195-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1484-196-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/3868-197-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1804-198-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4536-200-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4116-199-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/3912-202-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4112-201-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1472-205-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/3144-204-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4084-207-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4944-206-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2996-209-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4260-208-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1280-212-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2108-211-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4644-210-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1516-214-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1452-215-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2816-218-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1804-219-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4992-221-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2192-220-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/3128-217-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1484-216-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4124-213-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4536-222-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/3660-225-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/3912-224-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2620-223-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1472-226-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4840-227-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4084-228-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2996-232-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/5284-235-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1280-234-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2108-233-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/5296-237-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/3268-236-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/3128-239-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2816-240-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1412-238-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/5312-241-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/5320-244-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4992-243-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2192-242-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2620-245-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4840-248-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/5340-247-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/3660-246-0x0000000000400000-0x0000000000420000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\K: ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File opened (read-only) \??\M: ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File opened (read-only) \??\Q: ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File opened (read-only) \??\U: ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File opened (read-only) \??\V: ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File opened (read-only) \??\B: ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File opened (read-only) \??\G: ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File opened (read-only) \??\H: ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File opened (read-only) \??\N: ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File opened (read-only) \??\P: ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File opened (read-only) \??\R: ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File opened (read-only) \??\T: ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File opened (read-only) \??\A: ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File opened (read-only) \??\E: ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File opened (read-only) \??\W: ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File opened (read-only) \??\Z: ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File opened (read-only) \??\I: ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File opened (read-only) \??\O: ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File opened (read-only) \??\S: ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File opened (read-only) \??\X: ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File opened (read-only) \??\Y: ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File opened (read-only) \??\J: ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File opened (read-only) \??\L: ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe -
Drops file in System32 directory 12 IoCs
description ioc Process File created C:\Windows\SysWOW64\FxsTmp\horse [milf] titts high heels .rar.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\brasilian porn action catfight gorgeoushorny (Sarah,Britney).avi.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\sperm catfight .mpg.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\porn several models redhair .zip.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\System32\DriverStore\Temp\brasilian gay beastiality big hole .mpeg.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\german sperm lesbian lesbian glans .rar.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\american sperm lingerie [milf] cock (Gina).rar.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\indian lingerie masturbation feet sm (Jade).mpeg.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\blowjob licking beautyfull (Ashley).mpg.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\System32\LogFiles\Fax\Incoming\japanese kicking hot (!) titts .avi.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\malaysia cumshot horse voyeur .rar.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\swedish handjob lesbian girls boobs mistress .mpeg.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe -
Drops file in Program Files directory 18 IoCs
description ioc Process File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft SQL Server\130\Shared\beast hidden .zip.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\Microsoft Shared\danish action porn uncut circumcision .rar.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\Temp\tyrkish action gay uncut .avi.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Update\Download\trambling sleeping boobs .mpg.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\Download\black gang bang porn [free] boots (Jenna).mpg.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\Templates\porn kicking public ash mature .mpeg.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\Updates\Download\malaysia gang bang [milf] feet penetration .avi.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\lesbian licking .avi.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\lesbian [free] bondage .avi.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Temp\gang bang bukkake full movie stockings (Samantha,Christine).avi.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\norwegian nude uncut upskirt .avi.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\PrintAndShare\cum horse hot (!) .mpeg.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\asian porn licking bondage .mpg.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\action full movie granny .mpeg.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Program Files\Common Files\microsoft shared\sperm full movie boobs penetration .mpg.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Program Files\dotnet\shared\swedish lingerie [milf] boobs .avi.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\tyrkish porn fucking licking upskirt .mpeg.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft SQL Server\130\Shared\spanish kicking public granny .zip.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ces-ime-eashared-lm_31bf3856ad364e35_10.0.19041.1_none_3d0229d17c310f10\handjob hot (!) castration .rar.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..nearshareexperience_31bf3856ad364e35_10.0.19041.1_none_0b596e2a33be7d4c\spanish horse cumshot [bangbus] leather (Janette).zip.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-m..ineshared.resources_31bf3856ad364e35_10.0.19041.1_en-us_99ddc8ce8d3d6dac\action girls lady .zip.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\japanese lingerie [bangbus] boobs 50+ .rar.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\security\templates\horse fucking uncut black hairunshaved (Sylvia,Anniston).mpg.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_en-us_310bfb76047869ad\spanish fucking girls leather .zip.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost_31bf3856ad364e35_10.0.19041.264_none_cb389cf57d74d691\fetish bukkake uncut upskirt (Jade,Jade).rar.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_c3d467c525734eb3\chinese beast hidden .avi.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..nearshareexperience_31bf3856ad364e35_10.0.19041.1288_none_ca3007304990b2ea\handjob sperm masturbation bedroom (Karin).zip.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.84_none_81616275259e37fe\german beast horse girls hairy (Karin).zip.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.844_none_855aff45853749ef\indian sperm voyeur .rar.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.1_none_9aa486d790131d4e\british animal lingerie voyeur .mpeg.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_es-es_bf79b5fcc06b3128\danish handjob horse [free] vagina .avi.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\InputMethod\SHARED\italian lingerie full movie .rar.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\nude public boobs black hairunshaved .mpg.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\SharedFileCache\handjob catfight .mpg.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_en-us_215194e2327a46ac\chinese handjob cum voyeur .mpg.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-h..public-utils-shared_31bf3856ad364e35_10.0.19041.1202_none_d8a1416ab7cccdcf\spanish gang bang several models upskirt .zip.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_10.0.19041.1_none_a7ad1894592cfa12\russian fucking cum sleeping hole lady (Britney,Anniston).mpg.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\templates\american lingerie [bangbus] lady .mpg.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.1_none_0bc0f3d4cd7dc8fd\xxx fucking [bangbus] vagina ash .rar.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.928_none_33e0d5558cdd7c61\gay full movie YEâPSè& .rar.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_en-us_bfae5918c0443f83\gang bang lesbian vagina (Britney).zip.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\assembly\temp\sperm beastiality sleeping high heels .zip.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\PLA\Templates\black beast blowjob hot (!) hole .rar.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-manager-shared_31bf3856ad364e35_10.0.19041.153_none_e23c926e32d07dc1\gang bang porn catfight .mpg.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_10.0.19041.1_none_c6da8048542fddc7\malaysia animal handjob licking bedroom .rar.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_de-de_7860bee9439c3ae7\gay porn [bangbus] fishy .mpg.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_d38ece58f77171b4\malaysia trambling porn voyeur latex .avi.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-ime-eashared-proxy_31bf3856ad364e35_10.0.19041.1_none_4c786ae2f508e6d5\malaysia horse [milf] wifey (Sonja,Jenna).avi.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.1_none_2fe79eae2833b9b1\norwegian lesbian voyeur young (Jade,Samantha).zip.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.1_none_f3b35d713ce0fc7f\american beast lingerie [free] .rar.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.1_none_a80cea873b2a6772\nude voyeur bondage .zip.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_it-it_4c5922428a6f2d08\nude full movie vagina redhair (Christine).avi.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-h..public-utils-shared_31bf3856ad364e35_10.0.19041.1_none_19d22204a1f3fcaf\american fetish catfight .mpg.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\handjob lingerie public ejaculation (Gina,Sonja).rar.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor\canadian horse masturbation glans fishy .avi.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-composable-sharepicker_31bf3856ad364e35_10.0.19041.1_none_c87e96327faffd0e\indian fucking [milf] pregnant .mpg.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_es-es_30d7585a049f5b52\tyrkish beastiality sleeping (Samantha,Sylvia).mpeg.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-service-shared_31bf3856ad364e35_10.0.19041.1151_none_fbdc4c5f677dc2ec\french lingerie masturbation circumcision .rar.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_de-de_16bd831fd16633be\norwegian beast several models shoes (Ashley,Britney).mpg.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\mssrv.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.ShellCommon.SharedResources\spanish kicking catfight boobs .mpg.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.746_none_ab42fb092bda9182\french porn several models (Liz).avi.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..se-shared-datafiles_31bf3856ad364e35_10.0.19041.1_none_2f5f00d280dce9f6\danish handjob several models glans (Sylvia,Gina).mpg.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_ee7ea14f7d8a3ee3\russian blowjob cumshot [free] lady .mpeg.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_10.0.19041.572_none_cf90e12518baac85\canadian action several models latex .mpg.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..ore-shareexperience_31bf3856ad364e35_10.0.19041.964_none_1c1a193f5bfcf136\swedish cum full movie (Sarah).avi.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-mccs-engineshared_31bf3856ad364e35_10.0.19041.1_none_abfc9db6c377b91f\japanese lingerie porn public ash .mpeg.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Templates\handjob full movie (Melissa).zip.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.UI.ShellCommon\SharePickerUI\russian trambling [free] cock (Anniston,Sandy).zip.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_uk-ua_5b152a8d329397ec\animal girls nipples femdom .mpeg.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-b..-bcdtemplate-client_31bf3856ad364e35_10.0.19041.1_none_de1581e9a275faf8\lingerie full movie (Tatjana,Sylvia).rar.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.746_none_d01527cffa9c25bc\italian handjob public high heels .rar.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_10.0.19041.1_none_f07d4fae3e8e883f\italian horse lesbian (Britney).mpeg.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-mccs-engineshared_31bf3856ad364e35_10.0.19041.746_none_d404daff82e97769\fetish licking hotel .zip.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\german kicking hardcore several models boobs .rar.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\african gang bang hardcore girls legs YEâPSè& (Melissa,Melissa).mpg.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\animal [milf] cock girly (Janette).mpeg.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_it-it_adfc5e0bfca53431\german xxx several models .zip.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.1_none_fa09f84703cb02c5\indian bukkake blowjob catfight ejaculation (Melissa).avi.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\assembly\tmp\spanish handjob licking legs (Sonja).rar.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor\cumshot xxx hidden ash (Anniston,Samantha).mpeg.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\Downloads\norwegian sperm girls circumcision .mpg.exe ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4364 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 4364 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 2592 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 2592 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 4364 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 4364 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 1156 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 1156 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 2592 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 2592 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 3868 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 3868 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 4364 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 4364 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 4116 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 4116 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 1156 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 1156 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 4112 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 4112 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 3144 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 3144 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 2592 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 2592 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 4364 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 4364 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 4944 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 4944 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 3868 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 3868 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 4260 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 4260 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 4644 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 4644 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 4116 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 4116 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 1156 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 1156 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 4124 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 4124 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 1452 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 1452 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 2592 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 2592 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 4364 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 4364 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 1804 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 1804 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 4536 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 4536 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 1484 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 1484 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 4112 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 4112 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 3912 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 3912 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 3144 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 3144 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 3868 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 3868 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 4944 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 4944 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 1472 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 1472 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 4364 wrote to memory of 2592 4364 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 90 PID 4364 wrote to memory of 2592 4364 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 90 PID 4364 wrote to memory of 2592 4364 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 90 PID 2592 wrote to memory of 1156 2592 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 93 PID 2592 wrote to memory of 1156 2592 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 93 PID 2592 wrote to memory of 1156 2592 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 93 PID 4364 wrote to memory of 3868 4364 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 94 PID 4364 wrote to memory of 3868 4364 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 94 PID 4364 wrote to memory of 3868 4364 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 94 PID 1156 wrote to memory of 4116 1156 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 100 PID 1156 wrote to memory of 4116 1156 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 100 PID 1156 wrote to memory of 4116 1156 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 100 PID 2592 wrote to memory of 4112 2592 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 101 PID 2592 wrote to memory of 4112 2592 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 101 PID 2592 wrote to memory of 4112 2592 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 101 PID 4364 wrote to memory of 3144 4364 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 102 PID 4364 wrote to memory of 3144 4364 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 102 PID 4364 wrote to memory of 3144 4364 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 102 PID 3868 wrote to memory of 4944 3868 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 103 PID 3868 wrote to memory of 4944 3868 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 103 PID 3868 wrote to memory of 4944 3868 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 103 PID 4116 wrote to memory of 4260 4116 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 104 PID 4116 wrote to memory of 4260 4116 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 104 PID 4116 wrote to memory of 4260 4116 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 104 PID 1156 wrote to memory of 4644 1156 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 105 PID 1156 wrote to memory of 4644 1156 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 105 PID 1156 wrote to memory of 4644 1156 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 105 PID 2592 wrote to memory of 4124 2592 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 106 PID 2592 wrote to memory of 4124 2592 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 106 PID 2592 wrote to memory of 4124 2592 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 106 PID 4364 wrote to memory of 1452 4364 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 108 PID 4364 wrote to memory of 1452 4364 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 108 PID 4364 wrote to memory of 1452 4364 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 108 PID 4112 wrote to memory of 1484 4112 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 109 PID 4112 wrote to memory of 1484 4112 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 109 PID 4112 wrote to memory of 1484 4112 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 109 PID 3144 wrote to memory of 4536 3144 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 110 PID 3144 wrote to memory of 4536 3144 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 110 PID 3144 wrote to memory of 4536 3144 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 110 PID 3868 wrote to memory of 1804 3868 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 111 PID 3868 wrote to memory of 1804 3868 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 111 PID 3868 wrote to memory of 1804 3868 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 111 PID 4944 wrote to memory of 3912 4944 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 112 PID 4944 wrote to memory of 3912 4944 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 112 PID 4944 wrote to memory of 3912 4944 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 112 PID 4260 wrote to memory of 1472 4260 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 113 PID 4260 wrote to memory of 1472 4260 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 113 PID 4260 wrote to memory of 1472 4260 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 113 PID 4116 wrote to memory of 4084 4116 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 114 PID 4116 wrote to memory of 4084 4116 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 114 PID 4116 wrote to memory of 4084 4116 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 114 PID 1156 wrote to memory of 2996 1156 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 115 PID 1156 wrote to memory of 2996 1156 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 115 PID 1156 wrote to memory of 2996 1156 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 115 PID 4364 wrote to memory of 2108 4364 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 116 PID 4364 wrote to memory of 2108 4364 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 116 PID 4364 wrote to memory of 2108 4364 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 116 PID 2592 wrote to memory of 1280 2592 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 117 PID 2592 wrote to memory of 1280 2592 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 117 PID 2592 wrote to memory of 1280 2592 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 117 PID 4644 wrote to memory of 1516 4644 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 118 PID 4644 wrote to memory of 1516 4644 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 118 PID 4644 wrote to memory of 1516 4644 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 118 PID 3144 wrote to memory of 3268 3144 ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe 119
Processes
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"1⤵
- Checks computer location settings
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4364 -
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2592 -
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1156 -
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4116 -
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4260 -
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵
- Suspicious behavior: EnumeratesProcesses
PID:1472 -
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:6072
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"8⤵PID:8708
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"9⤵PID:18228
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"8⤵PID:11160
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"9⤵PID:15232
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"9⤵PID:19100
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"8⤵PID:14372
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"8⤵PID:19248
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:6980
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"8⤵PID:14172
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"8⤵PID:11616
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:10772
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"8⤵PID:17036
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"8⤵PID:11624
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:14092
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:18644
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:5416
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:8972
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"8⤵PID:16988
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"8⤵PID:12224
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:396
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:11404
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:6940
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:24060
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:9924
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:15588
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:19304
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:14108
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:18412
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:4084
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:5144
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:9196
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"8⤵PID:15280
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"8⤵PID:20184
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:11996
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"8⤵PID:18968
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:3692
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:18776
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:6844
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:14196
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:19204
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:9256
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:18260
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:14508
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:19344
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:5408
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:8416
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:18652
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:11580
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:18980
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:13392
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:19052
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:6828
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:15240
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:18896
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:9148
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:16716
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:16616
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:13216
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:19280
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4644 -
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:1516
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:6212
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:8844
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"8⤵PID:15256
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"8⤵PID:19368
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:14240
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:19212
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:6852
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:14444
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:19108
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:10680
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:15700
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:19296
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:14220
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:19320
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:5384
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:8892
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:19604
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:12604
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:24116
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:13784
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:212
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:7036
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:14044
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:19564
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:10056
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:24076
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:3068
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:19044
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:2996
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:5440
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:8512
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:15216
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:18904
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:12196
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:23800
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:13908
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:18420
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:6868
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:15288
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:19352
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:9220
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:18176
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:14340
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:19076
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:5400
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:8544
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:16740
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:25580
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:10996
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:18216
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:14084
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:19588
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:6908
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:15436
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:19264
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:9856
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:17568
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:2988
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:18660
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4112 -
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:1484 -
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:2620
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:6048
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:8628
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"8⤵PID:24036
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:5072
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:19312
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:6924
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:14420
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:19140
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:9992
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:18116
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:12968
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:13868
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:19612
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:5312
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:9396
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:24068
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:14036
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:19528
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:7028
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:24100
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:10564
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:24044
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:13772
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:19036
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:1412
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:5808
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:8620
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:19408
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:12012
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:24092
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:14020
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:18600
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:6884
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:18704
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:9524
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:18920
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:14148
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:19360
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:5364
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:8304
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:19596
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:12504
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:16608
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:13964
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:19496
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:6916
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:14212
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:19116
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:10000
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:18192
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:14460
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:19196
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4124 -
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:2192
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:5460
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:8536
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:15264
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:19004
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:11964
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:18864
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:14484
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:18936
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:6892
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:18300
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:9516
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:19400
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:14156
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:19964
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:5340
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:9420
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:16600
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:676
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:19060
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:7012
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:18668
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:10208
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:18944
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:14428
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:19148
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"3⤵PID:1280
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:6104
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:8440
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:24124
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:11972
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:18832
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:13996
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:18800
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:6972
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:12864
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:24108
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:13892
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:17320
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:10540
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:16932
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:14068
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:19572
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"3⤵PID:5376
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:9172
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:14060
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:19580
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:14516
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:19336
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"3⤵PID:6820
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:15272
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:18996
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"3⤵PID:10148
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:16748
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:12384
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"3⤵PID:14364
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"3⤵PID:19156
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3868 -
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4944 -
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:3912 -
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:5008
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:6016
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:8716
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"8⤵PID:14132
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"8⤵PID:18372
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:14204
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:19084
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:6900
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:15420
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:19228
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:9984
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:19452
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:14348
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:19288
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:5296
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:8296
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:19440
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:10444
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:18840
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:13956
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:18428
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:6772
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:12772
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:14300
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:13916
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:19504
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:8284
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:14864
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:19256
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:10764
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:16732
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:11620
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:13988
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:19512
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:3128
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:6188
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:8424
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:6388
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:11588
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:18960
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:14436
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:19188
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:6860
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:18816
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:9496
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:19416
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:14164
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:20260
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:5356
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:9864
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:18856
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:13792
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:18108
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:6964
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:19480
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:10704
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:15248
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:19012
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:14028
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:19520
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:1804 -
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:4840
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:6040
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:8780
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:18848
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:12020
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:18824
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:14004
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:19624
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:6988
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:16756
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:14536
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:9776
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:18308
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:14116
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:17268
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:5320
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:8528
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:18808
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:12172
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:18988
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:13980
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:18792
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:7020
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:12348
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:16684
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:25464
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:13876
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:17284
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:10048
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:16944
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:14124
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:18388
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"3⤵PID:2816
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:440
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:8520
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:20364
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:12244
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:23188
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:13972
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:19220
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:6836
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:14180
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:20196
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:9788
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:24084
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:14452
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:19172
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"3⤵PID:5348
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:9712
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:15428
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:12064
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:14412
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:11732
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"3⤵PID:6996
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:244
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:20252
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"3⤵PID:9632
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:18208
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"3⤵PID:14388
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"3⤵PID:19164
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3144 -
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4536 -
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:3660
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:6592
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:8432
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"7⤵PID:19464
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:14188
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:19124
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:7056
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:14404
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:19180
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:10572
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:18952
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:13808
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:19020
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:5304
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:9376
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:19392
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:12168
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:19328
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:6944
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:19556
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:9036
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:17108
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:13316
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:13856
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:17260
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"3⤵PID:3268
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:5336
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:8408
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:14140
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:18576
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:12648
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:17232
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:13948
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:19472
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:7064
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:16708
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:12228
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:9976
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:18200
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:14356
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:15696
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"3⤵PID:5284
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:6716
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:9164
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:14052
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:19548
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:14492
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:18888
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:8268
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:16764
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:11308
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:10124
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:19384
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:13924
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:19488
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"3⤵PID:6724
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:9428
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:18872
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:14380
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:19068
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"3⤵PID:8276
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:16652
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:20100
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"3⤵PID:10120
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:24052
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"3⤵PID:13932
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"3⤵PID:18396
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:1452 -
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"3⤵PID:4992
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:5828
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:8884
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:15224
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"6⤵PID:18880
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:12780
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:13896
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:19132
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:6876
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:20332
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:9532
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:18184
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:14100
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:17280
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"3⤵PID:5328
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:8772
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:14852
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:19236
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:13816
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:19028
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"3⤵PID:7004
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:15208
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:18912
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"3⤵PID:9872
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:15452
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:19272
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"3⤵PID:14076
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"3⤵PID:18608
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"2⤵PID:2108
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"3⤵PID:6056
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:8832
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"5⤵PID:16724
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:12960
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:13884
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:18380
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"3⤵PID:6956
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:14396
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:20128
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"3⤵PID:10200
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:18784
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"3⤵PID:14468
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"3⤵PID:20108
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"2⤵PID:5392
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"3⤵PID:8724
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:16692
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:14540
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"3⤵PID:11152
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:15444
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"4⤵PID:20120
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"3⤵PID:13940
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"3⤵PID:18404
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"2⤵PID:6932
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"3⤵PID:14476
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"3⤵PID:18928
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"2⤵PID:10728
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"3⤵PID:16700
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"3⤵PID:11764
-
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"2⤵PID:14500
-
-
C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac6781f97363c802ba8cca39c5eba2d0_NeikiAnalytics.exe"2⤵PID:19092
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\norwegian nude uncut upskirt .avi.exe
Filesize238KB
MD58cea1823e3ba329fa1d1ecb5cc5d0c5a
SHA1858c9614a5f991c32e1297dc0cd346dd593f410f
SHA25608438ff371d2eb9145ce7f2179c55ee42a12f7268e90f5b8d351e4a89058f18d
SHA51209e4f9d6dd90b9a6f38230f3315956990b50853a81a6db16d9b040fd05164d7ee7d7c591644f7dd56650f186f4b3cd13cfc22b46cb98c679beb7561f039b4301