Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
13/05/2024, 18:14
Behavioral task
behavioral1
Sample
c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe
-
Size
1.4MB
-
MD5
c0d0c5232ab474d77a071f2526ad7350
-
SHA1
ba1ffb993c9fadbae4a15be5ce9e33bb72189acb
-
SHA256
f18e3d450c17050837555716f7953491eae1cec4622262b84118660571c631e9
-
SHA512
4424b70d7cc081157101002a0f92690d4b0e48f038190c69c544f9d318a2dfa58352ad2e17a417c7f4129cdb731876f5108cee938c90d9c6bfdf825ba773f73e
-
SSDEEP
24576:VInO0uV8y5HRpxeMQSJ0yAFJSbHHYchBzj3M8amWsOhSxBP5m:Vl8sH5ambnj33MnmWsOhw5m
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 4 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-3808065738-1666277613-1125846146-1000\Control Panel\International\Geo\Nation c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3808065738-1666277613-1125846146-1000\Control Panel\International\Geo\Nation c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3808065738-1666277613-1125846146-1000\Control Panel\International\Geo\Nation c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3808065738-1666277613-1125846146-1000\Control Panel\International\Geo\Nation c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe -
resource yara_rule behavioral2/memory/2620-0-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2620-4-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2620-5-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/files/0x000700000002326b-7.dat upx behavioral2/memory/2620-12-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4252-13-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5756-15-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2852-16-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5356-17-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/560-19-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2620-18-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5912-20-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5880-22-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/924-21-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5468-25-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5508-24-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4252-23-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5436-26-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5756-27-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2852-28-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5356-29-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/628-30-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4560-31-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2160-33-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/560-32-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5920-35-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/6024-39-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5880-38-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4868-37-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5508-40-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5912-36-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3768-43-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/712-44-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4248-45-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5968-42-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5468-41-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5116-48-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5820-49-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4560-53-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5220-52-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2308-51-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/412-50-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/220-64-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/820-60-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2856-59-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2884-58-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3188-57-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5124-56-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2160-55-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4952-54-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5144-66-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/888-70-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/6024-69-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3232-68-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4868-67-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/6116-76-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4248-75-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3972-72-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3768-71-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2620-73-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3304-84-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4124-87-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/820-105-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2856-104-0x0000000000400000-0x000000000041E000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\M: c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File opened (read-only) \??\Q: c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File opened (read-only) \??\W: c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File opened (read-only) \??\E: c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File opened (read-only) \??\L: c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File opened (read-only) \??\N: c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File opened (read-only) \??\R: c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File opened (read-only) \??\T: c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File opened (read-only) \??\U: c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File opened (read-only) \??\X: c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File opened (read-only) \??\V: c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File opened (read-only) \??\G: c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File opened (read-only) \??\H: c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File opened (read-only) \??\I: c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File opened (read-only) \??\J: c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File opened (read-only) \??\K: c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File opened (read-only) \??\O: c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File opened (read-only) \??\P: c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File opened (read-only) \??\Z: c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File opened (read-only) \??\A: c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File opened (read-only) \??\B: c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File opened (read-only) \??\S: c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File opened (read-only) \??\Y: c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe -
Drops file in Program Files directory 9 IoCs
description ioc Process File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft SQL Server\130\Shared\fucking trambling masturbation beautyfull .zip.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\Updates\Download\german beastiality action licking (Sarah).zip.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File created C:\Program Files\dotnet\shared\blowjob several models cock stockings (Sandy,Sandy).mpg.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft SQL Server\130\Shared\lingerie [free] ash (Curtney).avi.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\japanese gang bang fucking hot (!) hairy .avi.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\fucking masturbation pregnant .zip.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\french blowjob public titts .avi.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File created C:\Program Files\Common Files\microsoft shared\african horse masturbation .mpg.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\Templates\spanish cumshot fetish catfight .rar.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe -
Drops file in Windows directory 1 IoCs
description ioc Process File created C:\Windows\mssrv.exe c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 24 IoCs
pid Process 2620 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 2620 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 924 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 924 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 2620 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 2620 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 4252 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 4252 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 2620 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 2620 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 5436 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 5436 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 924 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 924 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 5756 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 5756 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 2620 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 2620 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 2852 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 2852 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 4252 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 4252 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 5356 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 5356 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 24 IoCs
description pid Process procid_target PID 2620 wrote to memory of 924 2620 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 91 PID 2620 wrote to memory of 924 2620 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 91 PID 2620 wrote to memory of 924 2620 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 91 PID 2620 wrote to memory of 4252 2620 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 92 PID 2620 wrote to memory of 4252 2620 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 92 PID 2620 wrote to memory of 4252 2620 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 92 PID 924 wrote to memory of 5436 924 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 93 PID 924 wrote to memory of 5436 924 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 93 PID 924 wrote to memory of 5436 924 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 93 PID 2620 wrote to memory of 5756 2620 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 94 PID 2620 wrote to memory of 5756 2620 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 94 PID 2620 wrote to memory of 5756 2620 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 94 PID 4252 wrote to memory of 2852 4252 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 95 PID 4252 wrote to memory of 2852 4252 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 95 PID 4252 wrote to memory of 2852 4252 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 95 PID 924 wrote to memory of 5356 924 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 96 PID 924 wrote to memory of 5356 924 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 96 PID 924 wrote to memory of 5356 924 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 96 PID 5436 wrote to memory of 628 5436 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 97 PID 5436 wrote to memory of 628 5436 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 97 PID 5436 wrote to memory of 628 5436 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 97 PID 2620 wrote to memory of 560 2620 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 98 PID 2620 wrote to memory of 560 2620 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 98 PID 2620 wrote to memory of 560 2620 c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe 98
Processes
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"1⤵
- Checks computer location settings
- Adds Run key to start application
- Enumerates connected drives
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2620 -
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:924 -
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:5436 -
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:628
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:712
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:4304
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"7⤵PID:9156
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"7⤵PID:9532
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:6492
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"7⤵PID:1660
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:7800
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:9920
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:3768
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:6992
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:8596
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:7988
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:5144
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:8216
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:11244
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:6224
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:12232
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:7596
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:9784
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:5468
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:2884
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:7860
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:9804
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:4564
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:6088
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:7440
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:9380
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:4868
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:7468
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:9404
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:4952
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:7220
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:10748
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:4444
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:10248
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:6924
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:8820
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:6440
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:5356 -
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:5968
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:3188
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:8616
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:1092
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:6160
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:11624
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:7432
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:9356
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:220
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:7004
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:7856
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:8892
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:11788
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:820
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:8188
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:10760
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:6168
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:4636
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:7448
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:9372
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:5880
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:4824
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:8232
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:11172
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:1504
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:3888
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:7224
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:9148
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:1144
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:2160
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:6188
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:10272
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:7640
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:9632
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:2308
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:7024
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:10800
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:4572
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:7528
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:7092
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:8900
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:11796
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4252 -
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:2852 -
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:5508
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:3232
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:8208
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:11144
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:6392
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"6⤵PID:3120
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:8020
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:9832
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:6024
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:7556
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:9388
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:5124
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:8956
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:12088
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:6272
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:11104
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:7624
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:9796
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:5920
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:888
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:5184
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:9020
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:7704
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:2856
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:8052
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:9756
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:5040
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:9824
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:1440
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:8996
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:2012
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:412
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:6180
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:10576
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:7424
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:9364
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:4124
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:7604
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:9624
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:2116
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:9068
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:11972
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:6848
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:11560
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:8572
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:5488
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
PID:5756 -
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:5912
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:3304
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:7572
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:9936
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:3972
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:2812
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:2424
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:6812
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:2756
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:7676
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:10780
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:4560
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:6216
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:11032
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:7632
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:9812
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:3480
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:8608
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:5520
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:5932
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:9576
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:6592
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:8816
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:6460
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"2⤵PID:560
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:5820
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:6152
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"5⤵PID:11096
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:7256
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:9088
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:6232
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:5220
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:8224
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:10328
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:4980
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:1984
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:6940
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:8988
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:8496
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"2⤵PID:5116
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:6820
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"4⤵PID:12240
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:532
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:10788
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"2⤵PID:4248
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:7564
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:9396
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"2⤵PID:6116
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:9928
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"2⤵PID:6804
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"3⤵PID:7184
-
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"2⤵PID:8200
-
-
C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c0d0c5232ab474d77a071f2526ad7350_NeikiAnalytics.exe"2⤵PID:10848
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1328 --field-trial-handle=2280,i,1836084024518340990,18250262151825427757,262144 --variations-seed-version /prefetch:81⤵PID:6776
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\japanese gang bang fucking hot (!) hairy .avi.exe
Filesize125KB
MD5eb9e4c553f000782e05487fde1a5681f
SHA1d550c27a483decbe10ac884f18d0d59fde5fc400
SHA256e6749fb780aaeea7a2c747d970f569377ee63aed74f5b150bdb82b8cc6c9336b
SHA51245644a429f35342d1a36909c3ea1524c29ec52e161e748d4fb04d57c3740a95a88b508dc51fb889f2dac85164bf99a91b788a294722b704265ae07240df9d29a