Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
11s -
max time network
4s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
11/05/2024, 14:51 UTC
Behavioral task
behavioral1
Sample
103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe
-
Size
251KB
-
MD5
103f083ee44dc9d2fa6dc1f02badb470
-
SHA1
dd8f533b24ac29632def7daefdb96d7633df7dc1
-
SHA256
1607072928f1fd0918a6cd0ddcb4697b269f8064173700f00d7e542140b3b123
-
SHA512
e640f890c77d9b235fd966ee097bbf394ec410690c981effbbc2115f7b66afc26eab43ffd5acd0eb08ec8155c58acdbf8147ce23073d83369af7c0ad9f260ccb
-
SSDEEP
6144:A8jluQoSoIo5R8+zbNG26WKk5IhTHESWlAkwHiRp6:A8EQoSMVBr3CJESWpLI
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 9 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
resource yara_rule behavioral2/memory/1360-0-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/files/0x0007000000023433-5.dat upx behavioral2/memory/4920-33-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/5108-180-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/3600-181-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/2880-182-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/1360-183-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/4248-184-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/3460-187-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/1760-186-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/2008-185-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/3612-189-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/3140-188-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/2820-191-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/676-190-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/1360-192-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/1704-194-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/5108-193-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/5052-195-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/3248-197-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/2880-196-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/4704-198-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/2376-199-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/4564-200-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/1448-201-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/3536-203-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/4248-202-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/3460-204-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/2588-205-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/3612-206-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/2820-207-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/948-209-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/3616-208-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/1704-210-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/4672-212-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/2708-211-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/1864-214-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/5052-213-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/3392-217-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/3248-216-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/1872-218-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/3352-219-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/4892-222-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/4340-220-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/1448-221-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/2588-225-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/4652-224-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/1036-226-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/2232-228-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/2368-227-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/3536-223-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/432-231-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/948-230-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/3616-229-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/880-233-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/4672-232-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/1864-236-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/5500-245-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/4048-244-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/5284-242-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/5240-241-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/4856-240-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/3352-239-0x0000000000400000-0x000000000041C000-memory.dmp upx behavioral2/memory/5232-243-0x0000000000400000-0x000000000041C000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\A: 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File opened (read-only) \??\K: 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File opened (read-only) \??\M: 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File opened (read-only) \??\X: 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File opened (read-only) \??\E: 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File opened (read-only) \??\N: 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File opened (read-only) \??\V: 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File opened (read-only) \??\Y: 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File opened (read-only) \??\L: 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File opened (read-only) \??\Z: 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File opened (read-only) \??\Q: 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File opened (read-only) \??\B: 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File opened (read-only) \??\G: 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File opened (read-only) \??\H: 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File opened (read-only) \??\I: 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File opened (read-only) \??\J: 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File opened (read-only) \??\O: 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File opened (read-only) \??\P: 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File opened (read-only) \??\R: 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File opened (read-only) \??\S: 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File opened (read-only) \??\T: 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File opened (read-only) \??\U: 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File opened (read-only) \??\W: 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe -
Drops file in System32 directory 12 IoCs
description ioc Process File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\japanese action horse [milf] penetration (Christine,Melissa).zip.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\hardcore several models glans .rar.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\russian nude blowjob catfight feet .mpg.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\sperm big cock wifey .mpg.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\indian fetish horse full movie bedroom .avi.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\System32\LogFiles\Fax\Incoming\bukkake lesbian (Curtney).rar.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\gay hot (!) hole swallow .rar.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\tyrkish cum blowjob hot (!) young (Gina,Sylvia).rar.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\hardcore public feet mistress (Curtney).zip.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\lingerie [free] sm .avi.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\gay masturbation .zip.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\System32\DriverStore\Temp\horse hidden glans .zip.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe -
Drops file in Program Files directory 18 IoCs
description ioc Process File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\black kicking lingerie hidden .zip.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft SQL Server\130\Shared\lingerie several models .mpeg.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\Updates\Download\brasilian cum blowjob voyeur sweet .rar.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\black cumshot sperm voyeur hole beautyfull (Liz).mpeg.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\Microsoft Shared\black animal lingerie sleeping .mpg.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Temp\hardcore masturbation boots .avi.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Update\Download\bukkake licking feet sweet (Jade).mpg.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\Temp\blowjob catfight titts (Jenna,Sylvia).mpeg.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\Templates\tyrkish horse lingerie catfight swallow (Sonja,Melissa).mpeg.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\trambling licking hairy (Gina,Curtney).mpg.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\asian hardcore big granny .mpeg.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\blowjob [milf] titts boots (Jade).rar.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\PrintAndShare\brasilian handjob horse hot (!) .mpg.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\Download\lesbian [milf] hole ash (Sylvia).avi.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\swedish handjob beast [bangbus] .avi.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Program Files\Common Files\microsoft shared\brasilian fetish fucking big .mpeg.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Program Files\dotnet\shared\swedish animal beast several models .mpg.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft SQL Server\130\Shared\indian action sperm big ejaculation .mpg.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\SystemResources\Windows.ShellCommon.SharedResources\horse hot (!) hole bondage .mpeg.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_en-us_215194e2327a46ac\russian kicking lesbian masturbation stockings (Anniston,Sarah).avi.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost_31bf3856ad364e35_10.0.19041.264_none_cb389cf57d74d691\norwegian lingerie full movie glans (Gina,Melissa).mpeg.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_62312bfbb33d478a\swedish action sperm voyeur feet .avi.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_10.0.19041.1_none_a7ad1894592cfa12\french hardcore [bangbus] hairy .mpg.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\inclusiveOobe\view\templates\gay sleeping 40+ .rar.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-a..gement-uevtemplates_31bf3856ad364e35_10.0.19041.1_none_0d66b54875835a49\african lesbian licking (Curtney).mpg.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Templates\beast [milf] boots (Gina,Sarah).rar.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.84_none_81616275259e37fe\gang bang gay full movie penetration (Gina,Samantha).mpg.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.746_none_2212358fc33cc10f\swedish gang bang beast voyeur glans .mpg.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_es-es_211cf1c632a13851\malaysia trambling [free] glans ejaculation .mpg.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-composable-sharepicker_31bf3856ad364e35_10.0.19041.1_none_c87e96327faffd0e\animal bukkake hidden ejaculation (Christine,Sarah).avi.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_it-it_bdb6c49fcea35732\african lingerie girls hole granny (Sarah).rar.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5fdc43acc1be690d\german gay sleeping hole ejaculation (Sylvia).rar.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..se-shared-datafiles_31bf3856ad364e35_10.0.19041.1_none_2f5f00d280dce9f6\german gay girls beautyfull .avi.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.1_none_833abdc06c68d338\swedish kicking trambling hot (!) hole wifey (Liz).rar.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_de-de_16bd831fd16633be\lesbian hidden fishy .rar.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\indian animal horse catfight balls (Sonja,Janette).mpg.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\templates\russian porn beast several models (Liz).avi.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.UI.ShellCommon\SharePickerUI\gay girls upskirt .mpeg.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_d38ece58f77171b4\blowjob full movie (Melissa).avi.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.844_none_67b5915b5651dd8a\blowjob big cock mistress (Karin).avi.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\PLA\Templates\hardcore several models glans .mpeg.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.867_en-us_49453482f1fb5356\swedish gang bang xxx uncut cock gorgeoushorny (Sylvia).mpeg.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-b..-bcdtemplate-client_31bf3856ad364e35_10.0.19041.1_none_de1581e9a275faf8\handjob xxx [milf] cock .avi.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.844_none_855aff45853749ef\handjob beast uncut (Tatjana).rar.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.1_none_fa09f84703cb02c5\asian gay uncut cock .mpg.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.867_none_c29826784f9429f8\tyrkish beastiality sperm sleeping lady .mpeg.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\assembly\temp\fucking full movie feet bondage .mpeg.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor\trambling masturbation (Janette).mpg.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_de-de_881b257d159a5de8\kicking sperm voyeur feet sweet .zip.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.746_none_ab42fb092bda9182\spanish horse catfight cock (Anniston,Tatjana).avi.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.1_none_5d54c0aac5c3c12c\african lesbian lesbian feet wifey (Karin).mpg.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_de-de_7860bee9439c3ae7\japanese nude blowjob hidden hole .rar.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ces-ime-eashared-lm_31bf3856ad364e35_10.0.19041.1_none_3d0229d17c310f10\cumshot hardcore lesbian glans .avi.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.1_none_f3b35d713ce0fc7f\indian nude lingerie [free] (Tatjana).mpg.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.746_none_d01527cffa9c25bc\gay catfight feet .mpg.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_it-it_4c5922428a6f2d08\black horse blowjob big (Sarah).zip.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\Downloads\trambling girls cock bondage .avi.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.1_none_0bc0f3d4cd7dc8fd\malaysia blowjob lesbian titts .rar.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_en-us_310bfb76047869ad\spanish bukkake big feet (Britney,Janette).rar.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost_31bf3856ad364e35_10.0.19041.1202_none_621728fcd3c9d5f6\black kicking beast several models cock latex .avi.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.1_none_a80cea873b2a6772\french beast catfight beautyfull .mpg.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor\swedish animal xxx several models ejaculation .mpg.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_10.0.19041.572_none_cf90e12518baac85\blowjob public (Melissa).avi.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.789_en-us_58ebf9ecc407e3c0\horse trambling big penetration .mpg.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_10.0.19041.1_none_f07d4fae3e8e883f\beast hot (!) beautyfull .rar.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_es-es_bf79b5fcc06b3128\british xxx several models black hairunshaved .rar.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\mssrv.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\assembly\tmp\brasilian gang bang xxx voyeur .rar.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Templates\bukkake uncut black hairunshaved .mpeg.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\american horse hardcore hidden (Jade).rar.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_c3d467c525734eb3\african sperm [milf] 40+ (Gina,Curtney).mpeg.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..s-ime-eashared-ihds_31bf3856ad364e35_10.0.19041.1_none_e8996b7d3512363f\lesbian [milf] glans leather (Janette).mpeg.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.1_none_9aa486d790131d4e\trambling girls high heels .rar.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\security\templates\swedish horse lesbian [free] YEâPSè& (Sonja,Sarah).zip.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.928_none_33e0d5558cdd7c61\gay several models hole leather (Jade).avi.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_uk-ua_5b152a8d329397ec\action fucking several models glans (Sonja,Samantha).mpg.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.746_none_1bbb9ab9fc52bac9\action trambling girls hole beautyfull .zip.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.844_none_57eddd48e7a74274\german hardcore girls feet (Sonja,Sylvia).mpg.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\fucking [free] .rar.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\Downloaded Program Files\bukkake uncut .avi.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_en-us_bfae5918c0443f83\horse full movie cock balls .mpg.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_it-it_adfc5e0bfca53431\british bukkake [free] hole black hairunshaved .rar.exe 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 44 IoCs
pid Process 1360 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 1360 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 4920 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 4920 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 1360 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 1360 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 2008 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 2008 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 1760 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 1760 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 1360 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 1360 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 4920 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 4920 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 3140 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 3140 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 676 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 676 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 2008 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 2008 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 5108 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 5108 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 1360 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 1360 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 4920 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 4920 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 3600 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 3600 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 1760 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 1760 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 2880 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 2880 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 3140 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 4920 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 3140 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 4920 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 2008 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 2008 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 4704 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 4704 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 4564 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 4564 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 2376 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 2376 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 57 IoCs
description pid Process procid_target PID 1360 wrote to memory of 4920 1360 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 87 PID 1360 wrote to memory of 4920 1360 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 87 PID 1360 wrote to memory of 4920 1360 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 87 PID 1360 wrote to memory of 2008 1360 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 88 PID 1360 wrote to memory of 2008 1360 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 88 PID 1360 wrote to memory of 2008 1360 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 88 PID 4920 wrote to memory of 1760 4920 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 89 PID 4920 wrote to memory of 1760 4920 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 89 PID 4920 wrote to memory of 1760 4920 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 89 PID 1360 wrote to memory of 3140 1360 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 90 PID 1360 wrote to memory of 3140 1360 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 90 PID 1360 wrote to memory of 3140 1360 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 90 PID 4920 wrote to memory of 676 4920 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 91 PID 4920 wrote to memory of 676 4920 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 91 PID 4920 wrote to memory of 676 4920 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 91 PID 2008 wrote to memory of 5108 2008 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 92 PID 2008 wrote to memory of 5108 2008 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 92 PID 2008 wrote to memory of 5108 2008 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 92 PID 1760 wrote to memory of 3600 1760 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 93 PID 1760 wrote to memory of 3600 1760 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 93 PID 1760 wrote to memory of 3600 1760 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 93 PID 3140 wrote to memory of 2880 3140 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 94 PID 3140 wrote to memory of 2880 3140 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 94 PID 3140 wrote to memory of 2880 3140 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 94 PID 4920 wrote to memory of 2376 4920 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 95 PID 4920 wrote to memory of 2376 4920 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 95 PID 4920 wrote to memory of 2376 4920 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 95 PID 2008 wrote to memory of 4704 2008 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 96 PID 2008 wrote to memory of 4704 2008 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 96 PID 2008 wrote to memory of 4704 2008 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 96 PID 1360 wrote to memory of 4564 1360 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 97 PID 1360 wrote to memory of 4564 1360 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 97 PID 1360 wrote to memory of 4564 1360 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 97 PID 1760 wrote to memory of 4248 1760 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 98 PID 1760 wrote to memory of 4248 1760 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 98 PID 1760 wrote to memory of 4248 1760 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 98 PID 5108 wrote to memory of 3460 5108 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 99 PID 5108 wrote to memory of 3460 5108 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 99 PID 5108 wrote to memory of 3460 5108 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 99 PID 676 wrote to memory of 3612 676 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 100 PID 676 wrote to memory of 3612 676 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 100 PID 676 wrote to memory of 3612 676 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 100 PID 3600 wrote to memory of 2820 3600 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 101 PID 3600 wrote to memory of 2820 3600 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 101 PID 3600 wrote to memory of 2820 3600 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 101 PID 3140 wrote to memory of 1704 3140 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 102 PID 3140 wrote to memory of 1704 3140 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 102 PID 3140 wrote to memory of 1704 3140 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 102 PID 4920 wrote to memory of 2708 4920 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 103 PID 4920 wrote to memory of 2708 4920 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 103 PID 4920 wrote to memory of 2708 4920 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 103 PID 2008 wrote to memory of 5052 2008 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 104 PID 2008 wrote to memory of 5052 2008 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 104 PID 2008 wrote to memory of 5052 2008 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 104 PID 2880 wrote to memory of 3248 2880 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 105 PID 2880 wrote to memory of 3248 2880 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 105 PID 2880 wrote to memory of 3248 2880 103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe 105
Processes
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"1⤵
- Checks computer location settings
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1360 -
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4920 -
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1760 -
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3600 -
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:2820
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:3392
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"7⤵PID:6068
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"8⤵PID:10760
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"8⤵PID:15420
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"8⤵PID:20980
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"7⤵PID:7760
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"8⤵PID:1328
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"7⤵PID:11128
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"7⤵PID:16020
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"7⤵PID:21120
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:5548
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"7⤵PID:9504
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"8⤵PID:10128
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"7⤵PID:13568
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"7⤵PID:12604
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:6712
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"7⤵PID:16352
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"7⤵PID:21768
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:9748
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:14384
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:19792
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:2588
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:5832
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"7⤵PID:10020
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"8⤵PID:21084
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"7⤵PID:14272
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"7⤵PID:8736
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:7224
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"7⤵PID:16140
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"7⤵PID:21248
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:9208
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:14644
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:19700
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:5232
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:8268
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"7⤵PID:18172
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:12184
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:17696
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:7092
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:15040
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:10288
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:9716
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:20960
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:13720
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:18556
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:4248
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:4672
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:5980
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"7⤵PID:9864
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"7⤵PID:13976
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"7⤵PID:14784
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:7688
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"7⤵PID:16072
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"7⤵PID:22120
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:10596
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:14172
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:10356
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:5240
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:8548
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"7⤵PID:4484
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:12176
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:17444
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:7104
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:14840
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:7560
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:9492
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:10168
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:13648
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:12136
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:4340
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:5600
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:9724
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"7⤵PID:21056
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:13708
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:11500
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:6720
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:16132
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:21472
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:10204
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:14300
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:19800
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:2052
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:6652
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:13124
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:4516
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:8664
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:19332
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:12372
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:17688
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:6200
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:11644
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:16780
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:8280
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:2160
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:11728
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:16852
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:676 -
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:3612
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:2368
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:5808
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"7⤵PID:9628
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"8⤵PID:16392
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"7⤵PID:13640
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"7⤵PID:11968
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:7216
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"7⤵PID:16328
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"7⤵PID:8208
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:9840
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:14400
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:19900
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:5284
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:9808
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"7⤵PID:20776
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:13736
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:13760
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:4956
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:16152
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:21480
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:10188
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:21356
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:14316
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:19488
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:3536
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:5784
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:10028
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:14292
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:19520
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:7532
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:16344
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:5416
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:10488
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:15356
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:16224
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:5028
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:6772
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:13336
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:5696
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:9076
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:19568
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:13196
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:19340
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:6276
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:12732
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:19036
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:8328
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:9264
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:12200
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:17644
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:2376 -
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:948
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:5952
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:9780
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"7⤵PID:20784
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:13656
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:12284
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:7696
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:17412
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:11112
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:15716
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:3200
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:5256
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:7732
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:17428
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:10904
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:15464
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:8504
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:7112
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:16276
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:8080
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:9516
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:9304
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:13612
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:2808
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"3⤵PID:2708
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:432
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:6896
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:14364
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:19652
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:9388
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:10856
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:13436
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:644
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:6260
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:12072
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:15036
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:8384
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:19324
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:11700
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:17288
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"3⤵PID:4048
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:6640
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:13000
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:19316
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:8828
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:19372
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:12612
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:18776
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"3⤵PID:6116
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:10340
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:14832
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:5080
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"3⤵PID:7752
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:16540
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"3⤵PID:11136
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"3⤵PID:16116
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"3⤵PID:21128
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2008 -
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:5108 -
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:3460
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:3616
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:5940
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"7⤵PID:9848
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"7⤵PID:14284
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"7⤵PID:15268
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:7548
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"7⤵PID:17420
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:10608
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:13224
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:9600
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:5492
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:10012
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"7⤵PID:21324
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:14052
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:19668
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:4724
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:15996
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:20912
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:10132
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:21076
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:14044
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:14492
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:1448
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:5776
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:10004
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"7⤵PID:21092
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:13968
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:14280
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:7208
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:16080
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:22348
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:9756
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:14600
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:19936
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:2232
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:6744
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:13268
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:2400
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:9068
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:8856
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:12992
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:19304
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:6244
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:12276
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:17620
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:8260
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:16544
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:11720
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:16860
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:4704 -
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:4652
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:5884
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:10496
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:15048
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:17544
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:7392
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:17328
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:10472
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:15076
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:17796
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:5224
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:7772
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:17204
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:11104
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:15652
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:21100
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:6808
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:14060
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:14924
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:8440
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:18860
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:12296
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:2712
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"3⤵PID:5052
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:880
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:6940
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:14356
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:19688
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:8980
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:11988
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:1896
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:4456
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:6592
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:12192
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:18164
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:8772
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:5388
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:12564
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:18228
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"3⤵PID:4856
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:6752
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:12488
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:5560
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:8996
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:3408
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:12708
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:18988
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"3⤵PID:6132
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:11120
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:15952
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:20892
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"3⤵PID:7848
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:17084
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"3⤵PID:11148
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"3⤵PID:15660
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"3⤵PID:21156
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3140 -
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2880 -
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:3248
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:5196
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:7712
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"7⤵PID:17336
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:10768
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:15364
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:20968
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:6904
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:13356
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:5948
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:9376
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:15064
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:13344
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:5856
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:4892
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:6632
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:12080
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:17008
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:8800
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:5996
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:12700
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:18832
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:5140
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:10916
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:15668
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:17484
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:8012
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:17436
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:10944
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:15724
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:20592
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"3⤵PID:1704
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:4544
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:6460
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:11632
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:16788
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:8788
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:17732
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:12716
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:18940
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:3936
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:10624
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:15016
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:17908
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:8004
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:17680
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:11060
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:16012
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:20884
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"3⤵PID:3352
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:6316
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:12224
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:17356
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:8376
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:19392
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:11652
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:17108
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"3⤵PID:6104
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:10368
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:14820
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:20464
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"3⤵PID:7704
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:17348
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"3⤵PID:10616
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"3⤵PID:14260
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"3⤵PID:20524
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
PID:4564 -
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"3⤵PID:1864
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:5876
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:9772
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"6⤵PID:20792
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:13728
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:11944
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:7416
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:15776
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:22356
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:10480
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:15056
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:17676
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"3⤵PID:5648
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:9800
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:13984
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:14576
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"3⤵PID:7260
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:16336
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:10392
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"3⤵PID:10504
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"3⤵PID:15028
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"3⤵PID:19576
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"2⤵PID:1872
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"3⤵PID:5500
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:8540
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"5⤵PID:19248
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:12128
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:16880
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"3⤵PID:6976
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:14372
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:19808
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"3⤵PID:9084
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:7140
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"3⤵PID:13188
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"3⤵PID:19416
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"2⤵PID:1036
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"3⤵PID:6736
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:13396
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:6948
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"3⤵PID:9008
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"4⤵PID:4604
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"3⤵PID:12812
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"3⤵PID:19084
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"2⤵PID:6232
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"3⤵PID:11272
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"3⤵PID:15708
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"3⤵PID:18464
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"2⤵PID:8420
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"3⤵PID:18144
-
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"2⤵PID:11784
-
-
C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\103f083ee44dc9d2fa6dc1f02badb470_NeikiAnalytics.exe"2⤵PID:17276
-
Network
-
Remote address:8.8.8.8:53Request20.160.190.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request8.8.8.8.in-addr.arpaIN PTRResponse8.8.8.8.in-addr.arpaIN PTRdnsgoogle
-
Remote address:8.8.8.8:53Request77.190.18.2.in-addr.arpaIN PTRResponse77.190.18.2.in-addr.arpaIN PTRa2-18-190-77deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request26.35.223.20.in-addr.arpaIN PTRResponse
-
GEThttps://www.bing.com/th?id=OADD2.10239359720591_10PHTLBML42K6TRZO&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=24&h=24&dynsize=1&qlt=90Remote address:23.62.61.106:443RequestGET /th?id=OADD2.10239359720591_10PHTLBML42K6TRZO&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=24&h=24&dynsize=1&qlt=90 HTTP/2.0
host: www.bing.com
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
ResponseHTTP/2.0 200
content-type: image/png
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QWthbWFp"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
content-length: 1107
date: Sat, 11 May 2024 14:51:07 GMT
alt-svc: h3=":443"; ma=93600
x-cdn-traceid: 0.663d3e17.1715439067.4323da6
-
Remote address:8.8.8.8:53Request106.61.62.23.in-addr.arpaIN PTRResponse106.61.62.23.in-addr.arpaIN PTRa23-62-61-106deploystaticakamaitechnologiescom
-
23.62.61.106:443https://www.bing.com/th?id=OADD2.10239359720591_10PHTLBML42K6TRZO&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=24&h=24&dynsize=1&qlt=90tls, http21.4kB 6.4kB 16 12
HTTP Request
GET https://www.bing.com/th?id=OADD2.10239359720591_10PHTLBML42K6TRZO&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=24&h=24&dynsize=1&qlt=90HTTP Response
200
-
72 B 158 B 1 1
DNS Request
20.160.190.20.in-addr.arpa
-
66 B 90 B 1 1
DNS Request
8.8.8.8.in-addr.arpa
-
70 B 133 B 1 1
DNS Request
77.190.18.2.in-addr.arpa
-
71 B 157 B 1 1
DNS Request
26.35.223.20.in-addr.arpa
-
71 B 135 B 1 1
DNS Request
106.61.62.23.in-addr.arpa
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\trambling licking hairy (Gina,Curtney).mpg.exe
Filesize1.1MB
MD5212da4ae0220ed1d33bbc511e4c20707
SHA15bba0a1863a79e10edba53fde244ce0243bd2bb6
SHA256d8d5f8d5d27237851e676ee59c2fbc6fff877dacfbe25747cbe2c43223f87eaa
SHA5123aecbeed5744cbd21bde07d807a33f3c13ec4d56d1285aa4c8d3e6088a6b4193c09e6a7243824a3993ed3d518311704fe1e4232e0500338198f59d6c90d47e93