Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
14s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
14/05/2024, 09:23
Behavioral task
behavioral1
Sample
bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe
-
Size
1.5MB
-
MD5
bb97abb3ad120b9601155ae2aa6a07f0
-
SHA1
f2f175b9e2f7c3d9f18215e7366abae4885bf006
-
SHA256
bf1f13f9b7d594712ba8a482ee3c69fb5c1ccb3ff5e5c5e8f010c9bf960d0103
-
SHA512
76267eac9cac533cc0b5b147d1e2040566791700f1a6d0bea800bf9e9d05a1c1879b40afab450411e10cb3f392924a2c4c3bc70ed8f26361d18ccc456f32fc33
-
SSDEEP
24576:Yo0aUyfLsQ7amBA5AoyIgezcDlU1TQ5PJB5IXxgonXa96OPYuor9:X0fyDAeIyIgeEa1TQtnyXxg2qIOPYuop
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 13 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000\Control Panel\International\Geo\Nation bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000\Control Panel\International\Geo\Nation bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000\Control Panel\International\Geo\Nation bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000\Control Panel\International\Geo\Nation bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000\Control Panel\International\Geo\Nation bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000\Control Panel\International\Geo\Nation bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000\Control Panel\International\Geo\Nation bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000\Control Panel\International\Geo\Nation bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000\Control Panel\International\Geo\Nation bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000\Control Panel\International\Geo\Nation bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000\Control Panel\International\Geo\Nation bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000\Control Panel\International\Geo\Nation bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1162180587-977231257-2194346871-1000\Control Panel\International\Geo\Nation bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
resource yara_rule behavioral2/memory/4736-0-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/files/0x0007000000023440-5.dat upx behavioral2/memory/4476-22-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4776-151-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3232-152-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3980-179-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2244-181-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3600-180-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3680-182-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/940-183-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2344-184-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3532-185-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2400-186-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4736-187-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4716-188-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4776-191-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4696-192-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4440-190-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4476-189-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3232-195-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3600-199-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3748-198-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4420-197-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3980-196-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4324-206-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4232-205-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4368-204-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3368-203-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1612-202-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4300-201-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2244-200-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3680-209-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4772-210-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5156-212-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/940-211-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5164-213-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5236-215-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2344-214-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5260-219-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4716-220-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2400-218-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3532-217-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2268-216-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5328-222-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4440-221-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4696-223-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5360-224-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5468-225-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5548-232-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5540-231-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5532-230-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5524-229-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5496-228-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3748-227-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4420-226-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4324-238-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5596-242-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5568-241-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5560-240-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4232-237-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4772-246-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4368-236-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3368-235-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1612-234-0x0000000000400000-0x000000000041E000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\A: bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File opened (read-only) \??\E: bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File opened (read-only) \??\J: bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File opened (read-only) \??\R: bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File opened (read-only) \??\W: bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File opened (read-only) \??\S: bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File opened (read-only) \??\T: bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File opened (read-only) \??\V: bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File opened (read-only) \??\G: bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File opened (read-only) \??\L: bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File opened (read-only) \??\N: bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File opened (read-only) \??\O: bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File opened (read-only) \??\P: bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File opened (read-only) \??\X: bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File opened (read-only) \??\I: bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File opened (read-only) \??\K: bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File opened (read-only) \??\U: bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File opened (read-only) \??\Y: bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File opened (read-only) \??\Z: bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File opened (read-only) \??\B: bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File opened (read-only) \??\H: bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File opened (read-only) \??\M: bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File opened (read-only) \??\Q: bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe -
Drops file in System32 directory 12 IoCs
description ioc Process File created C:\Windows\SysWOW64\config\systemprofile\trambling girls hole balls .avi.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\brasilian nude lingerie licking feet high heels .zip.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\brasilian action fucking sleeping cock balls .zip.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\System32\DriverStore\Temp\brasilian kicking lingerie [free] hole shower (Jade).zip.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\System32\LogFiles\Fax\Incoming\russian fetish horse several models feet hotel (Janette).zip.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\lingerie hidden (Sylvia).avi.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\black animal horse catfight swallow .avi.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\russian handjob bukkake [milf] sm .mpg.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\tyrkish gang bang horse [free] .mpg.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\japanese handjob lesbian hidden young .mpeg.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\canadian trambling hot (!) (Tatjana).zip.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\tyrkish horse sperm several models feet black hairunshaved (Curtney).mpg.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe -
Drops file in Program Files directory 18 IoCs
description ioc Process File created C:\Program Files (x86)\Common Files\Microsoft Shared\russian porn lesbian [free] .mpeg.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Temp\swedish cumshot hardcore big gorgeoushorny .zip.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\Download\italian nude trambling [bangbus] (Jade).rar.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Program Files\dotnet\shared\brasilian horse trambling uncut sm (Britney,Tatjana).rar.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\tyrkish cumshot lingerie masturbation sweet (Sonja,Tatjana).mpeg.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft SQL Server\130\Shared\tyrkish handjob lingerie masturbation sweet .rar.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\brasilian horse blowjob lesbian hole upskirt (Sarah).mpeg.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\russian cumshot horse masturbation granny .mpeg.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\italian gang bang blowjob [free] hole .avi.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Program Files\Common Files\microsoft shared\bukkake catfight wifey .rar.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\Updates\Download\xxx full movie .avi.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\PrintAndShare\fucking licking cock .zip.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\russian kicking blowjob licking feet swallow .zip.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\Templates\gay licking granny .rar.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft SQL Server\130\Shared\russian nude hardcore uncut hole .avi.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Update\Download\russian porn lesbian [milf] glans hairy .rar.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\Temp\fucking masturbation .mpg.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\fucking uncut titts .mpeg.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.1_none_0bc0f3d4cd7dc8fd\chinese sperm sleeping titts beautyfull .avi.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5fdc43acc1be690d\african trambling uncut (Melissa).zip.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.746_none_ab42fb092bda9182\xxx masturbation titts .zip.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-manager-shared_31bf3856ad364e35_10.0.19041.1266_none_7916f7558927ae23\italian porn beast several models .rar.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_10.0.19041.1_none_c6da8048542fddc7\black cum fucking full movie glans .rar.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\american beastiality lingerie girls .rar.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\assembly\tmp\xxx licking fishy .mpg.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\Downloads\beast hot (!) (Curtney).rar.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-m..ineshared.resources_31bf3856ad364e35_10.0.19041.1_en-us_99ddc8ce8d3d6dac\cumshot gay [milf] titts latex (Tatjana).mpeg.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-manager-shared_31bf3856ad364e35_10.0.19041.153_none_e23c926e32d07dc1\cumshot horse hidden glans circumcision .rar.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\InputMethod\SHARED\brasilian fetish bukkake girls (Liz).mpg.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost_31bf3856ad364e35_10.0.19041.1202_none_621728fcd3c9d5f6\action trambling catfight cock .zip.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.84_none_81616275259e37fe\black gang bang fucking licking feet .avi.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_ee7ea14f7d8a3ee3\action sperm full movie cock latex (Jade).mpeg.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-ime-eashared-ccshared_31bf3856ad364e35_10.0.19041.1_none_8c0b126c198fcf70\handjob lesbian lesbian mature (Kathrin,Jade).zip.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_es-es_211cf1c632a13851\spanish beast voyeur glans .rar.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-a..gement-uevtemplates_31bf3856ad364e35_10.0.19041.1_none_0d66b54875835a49\african hardcore girls .rar.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.1_none_2fe79eae2833b9b1\lesbian catfight feet pregnant .mpeg.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.746_none_2212358fc33cc10f\japanese cum sperm lesbian fishy (Sonja,Tatjana).avi.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_de-de_16bd831fd16633be\chinese gay [milf] .mpeg.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\assembly\temp\japanese handjob lingerie uncut titts 50+ (Sarah).mpg.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\CbsTemp\fucking uncut (Liz).rar.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\xxx [free] beautyfull .zip.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_it-it_adfc5e0bfca53431\cum fucking girls castration (Sandy,Liz).zip.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.789_en-us_58ebf9ecc407e3c0\canadian sperm uncut (Karin).zip.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\danish action blowjob licking .mpeg.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\Downloaded Program Files\japanese beastiality hardcore full movie traffic .mpeg.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\Downloads\brasilian cumshot gay big bondage .avi.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-b..-bcdtemplate-client_31bf3856ad364e35_10.0.19041.1_none_de1581e9a275faf8\kicking sperm hidden Ôï (Ashley,Janette).mpg.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ces-ime-eashared-lm_31bf3856ad364e35_10.0.19041.1_none_3d0229d17c310f10\spanish xxx uncut leather (Christine,Tatjana).mpg.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.1_none_fa09f84703cb02c5\italian nude beast [free] feet .zip.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_10.0.19041.1_none_a7ad1894592cfa12\porn blowjob voyeur feet hairy .zip.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor\fucking uncut sm .mpg.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\danish horse bukkake voyeur glans stockings .rar.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.ShellCommon.SharedResources\black handjob beast public hole .zip.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.1_none_9aa486d790131d4e\action xxx full movie hairy .rar.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-h..public-utils-shared_31bf3856ad364e35_10.0.19041.1_none_19d22204a1f3fcaf\spanish bukkake [milf] high heels .rar.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\SharedFileCache\hardcore [bangbus] fishy (Christine,Karin).zip.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_d38ece58f77171b4\african trambling voyeur (Karin).avi.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.1_none_833abdc06c68d338\japanese fetish trambling hidden fishy .mpg.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\inclusiveOobe\view\templates\lesbian hidden cock hotel (Janette).zip.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.928_none_33e0d5558cdd7c61\action fucking voyeur (Liz).zip.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_es-es_bf79b5fcc06b3128\tyrkish gang bang trambling public hairy .rar.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-service-shared_31bf3856ad364e35_10.0.19041.1_none_3cfd44d351b1a8ab\canadian horse lesbian hairy .mpg.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\bukkake voyeur gorgeoushorny .rar.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\security\templates\swedish kicking xxx girls .avi.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Templates\american fetish blowjob uncut hole (Jenna,Sarah).mpeg.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_de-de_881b257d159a5de8\japanese cumshot lesbian [free] (Janette).mpeg.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_en-us_310bfb76047869ad\malaysia trambling uncut femdom .mpeg.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost_31bf3856ad364e35_10.0.19041.264_none_cb389cf57d74d691\brasilian action beast lesbian (Tatjana).mpeg.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.844_none_855aff45853749ef\british horse uncut (Jade).rar.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.746_none_d01527cffa9c25bc\german beast girls .rar.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\mssrv.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_en-us_215194e2327a46ac\french xxx [bangbus] (Melissa).rar.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_c3d467c525734eb3\black porn gay hidden .zip.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..se-shared-datafiles_31bf3856ad364e35_10.0.19041.1_none_2f5f00d280dce9f6\porn lingerie girls glans swallow (Melissa).rar.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..ore-shareexperience_31bf3856ad364e35_10.0.19041.1_none_f42978969c79336a\lesbian catfight titts ash .rar.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_10.0.19041.906_none_ef0e010d1381269b\indian nude trambling hot (!) feet femdom .avi.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.867_none_c29826784f9429f8\swedish handjob lesbian public glans lady .rar.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_10.0.19041.572_none_cf90e12518baac85\german horse voyeur (Janette).rar.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..nearshareexperience_31bf3856ad364e35_10.0.19041.1288_none_ca3007304990b2ea\american nude hardcore catfight titts ash .mpg.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_uk-ua_5b152a8d329397ec\french lesbian masturbation .mpg.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..s-ime-eashared-ihds_31bf3856ad364e35_10.0.19041.1_none_e8996b7d3512363f\malaysia blowjob big cock granny .zip.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_en-us_bfae5918c0443f83\gang bang horse [free] hole .mpg.exe bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 62 IoCs
pid Process 4736 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 4736 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 4476 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 4476 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 4736 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 4736 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 4776 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 4776 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 3232 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 3232 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 4736 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 4736 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 4476 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 4476 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 3980 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 3980 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 4736 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 2244 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 4736 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 2244 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 3600 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 3600 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 3680 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 3680 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 4776 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 4776 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 4476 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 4476 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 3232 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 3232 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 940 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 940 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 4736 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 4736 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 4776 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 4776 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 4476 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 4476 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 3532 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 2268 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 3532 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 2268 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 2400 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 2400 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 2344 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 2344 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 3232 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 3232 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 3980 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 3980 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 4716 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 4716 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 4440 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 4440 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 3600 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 4696 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 4696 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 3600 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 2244 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 3680 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 2244 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 3680 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 4736 wrote to memory of 4476 4736 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 87 PID 4736 wrote to memory of 4476 4736 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 87 PID 4736 wrote to memory of 4476 4736 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 87 PID 4736 wrote to memory of 4776 4736 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 93 PID 4736 wrote to memory of 4776 4736 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 93 PID 4736 wrote to memory of 4776 4736 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 93 PID 4476 wrote to memory of 3232 4476 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 94 PID 4476 wrote to memory of 3232 4476 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 94 PID 4476 wrote to memory of 3232 4476 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 94 PID 4736 wrote to memory of 3980 4736 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 96 PID 4736 wrote to memory of 3980 4736 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 96 PID 4736 wrote to memory of 3980 4736 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 96 PID 4476 wrote to memory of 3600 4476 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 97 PID 4476 wrote to memory of 3600 4476 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 97 PID 4476 wrote to memory of 3600 4476 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 97 PID 4776 wrote to memory of 2244 4776 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 98 PID 4776 wrote to memory of 2244 4776 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 98 PID 4776 wrote to memory of 2244 4776 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 98 PID 3232 wrote to memory of 3680 3232 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 99 PID 3232 wrote to memory of 3680 3232 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 99 PID 3232 wrote to memory of 3680 3232 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 99 PID 4736 wrote to memory of 940 4736 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 101 PID 4736 wrote to memory of 940 4736 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 101 PID 4736 wrote to memory of 940 4736 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 101 PID 4776 wrote to memory of 2344 4776 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 102 PID 4776 wrote to memory of 2344 4776 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 102 PID 4776 wrote to memory of 2344 4776 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 102 PID 4476 wrote to memory of 3532 4476 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 103 PID 4476 wrote to memory of 3532 4476 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 103 PID 4476 wrote to memory of 3532 4476 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 103 PID 3232 wrote to memory of 2400 3232 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 104 PID 3232 wrote to memory of 2400 3232 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 104 PID 3232 wrote to memory of 2400 3232 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 104 PID 3980 wrote to memory of 2268 3980 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 105 PID 3980 wrote to memory of 2268 3980 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 105 PID 3980 wrote to memory of 2268 3980 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 105 PID 3600 wrote to memory of 4716 3600 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 106 PID 3600 wrote to memory of 4716 3600 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 106 PID 3600 wrote to memory of 4716 3600 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 106 PID 3680 wrote to memory of 4440 3680 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 107 PID 3680 wrote to memory of 4440 3680 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 107 PID 3680 wrote to memory of 4440 3680 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 107 PID 2244 wrote to memory of 4696 2244 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 108 PID 2244 wrote to memory of 4696 2244 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 108 PID 2244 wrote to memory of 4696 2244 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 108 PID 3680 wrote to memory of 4420 3680 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 111 PID 3680 wrote to memory of 4420 3680 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 111 PID 3680 wrote to memory of 4420 3680 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 111 PID 2244 wrote to memory of 4232 2244 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 112 PID 2244 wrote to memory of 4232 2244 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 112 PID 2244 wrote to memory of 4232 2244 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 112 PID 3600 wrote to memory of 3748 3600 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 113 PID 3600 wrote to memory of 3748 3600 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 113 PID 3600 wrote to memory of 3748 3600 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 113 PID 3980 wrote to memory of 4324 3980 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 114 PID 3980 wrote to memory of 4324 3980 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 114 PID 3980 wrote to memory of 4324 3980 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 114 PID 3232 wrote to memory of 4300 3232 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 115 PID 3232 wrote to memory of 4300 3232 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 115 PID 3232 wrote to memory of 4300 3232 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 115 PID 4776 wrote to memory of 1612 4776 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 116 PID 4776 wrote to memory of 1612 4776 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 116 PID 4776 wrote to memory of 1612 4776 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 116 PID 4476 wrote to memory of 3368 4476 bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe 117
Processes
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"1⤵
- Checks computer location settings
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4736 -
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4476 -
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3232 -
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3680 -
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4440 -
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:5236
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:6552
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"8⤵PID:9476
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"9⤵PID:22588
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"8⤵PID:15204
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"8⤵PID:20020
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"8⤵PID:16352
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:8068
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"8⤵PID:15140
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"8⤵PID:20720
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:11404
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"8⤵PID:27460
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:14944
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:19492
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:16948
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:6100
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:8876
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"8⤵PID:18260
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"8⤵PID:7172
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:12548
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"8⤵PID:25744
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:14664
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:20684
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:7412
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:15348
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:21056
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:10900
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:22596
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:15032
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:3520
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:4420
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:5468
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:6776
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"8⤵PID:12748
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"9⤵PID:8556
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"8⤵PID:14704
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"8⤵PID:5016
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"8⤵PID:16348
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:9868
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"8⤵PID:15924
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"8⤵PID:25152
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:15252
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:21736
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:6728
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:11456
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"8⤵PID:21632
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:14984
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:19564
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:17124
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:3988
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:18104
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:7464
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:10588
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:21664
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:15104
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:19524
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:16228
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:5496
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:6904
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:11860
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"8⤵PID:26908
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:14864
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:21396
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:9968
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:21216
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:15212
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:21476
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:6780
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:11900
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:8340
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:14848
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:21088
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:8612
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:17236
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:21704
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:12312
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:25284
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:14776
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:19668
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:2400 -
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:5272
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:6356
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:10048
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"8⤵PID:27056
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:15300
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:20100
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:7948
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:14620
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:21072
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:11544
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:21688
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:14896
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:19728
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:5204
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:8868
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:15164
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:3020
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:15968
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:11536
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:25420
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:14912
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:19516
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:17648
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:7544
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:12800
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:21444
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:10068
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:15916
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:21196
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:12932
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:20200
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:14768
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:21460
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:4300
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:5968
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:9408
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:1784
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:26096
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:12408
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:26876
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:14688
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:21352
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:7876
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:12740
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:26528
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:14840
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:21452
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:10028
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:22556
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:724
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:21624
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:5568
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:6760
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:18068
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:26560
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:9440
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:21720
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:15196
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:19992
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:6876
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:12716
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:26544
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:14832
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:19696
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:8928
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:15132
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:21064
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:12756
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:25160
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:14824
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:19660
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:16160
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3600 -
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4716 -
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:5260
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:6388
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:9844
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"8⤵PID:27040
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:15172
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:21104
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:8132
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:22564
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:10728
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:18232
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:6984
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:15024
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:19720
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:6112
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:9048
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:22648
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:12556
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:25468
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:14672
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:21024
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:7320
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:12944
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:25144
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:14728
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:21484
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:9680
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:22604
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:15276
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:20012
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:3748
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:6212
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:9164
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:18052
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:25732
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:11528
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:3388
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:14920
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:19508
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:16188
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:8084
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:14936
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:19468
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:17148
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:11764
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:26892
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:15120
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:19652
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:16460
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:5596
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:4296
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:14976
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:19556
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:17152
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:9284
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:22612
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:15072
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:20728
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:6868
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:10880
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:22672
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:15016
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:19596
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:9340
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:18224
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:25460
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:15112
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:19688
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:15780
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:3532 -
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:5328
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:6696
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:10908
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:1536
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:15000
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:19572
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:8464
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:15856
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:22488
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:12304
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:25168
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:14752
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:19332
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:16888
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:5400
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:9040
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:17760
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:20704
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:13120
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:25276
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:14720
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:4344
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:15644
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:7776
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:17228
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:21696
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:11268
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:26900
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:15308
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:21436
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵PID:3368
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:6284
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:9860
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:24828
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:15236
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:20980
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:7784
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:15088
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:19476
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:16152
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:11380
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:27032
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:15332
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:20692
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵PID:5524
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:7768
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:18060
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:12224
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:10624
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:8164
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:15056
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:19460
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:16884
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵PID:6788
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:17800
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:22632
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵PID:8388
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:15148
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:4552
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵PID:12048
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:25292
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵PID:14636
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵PID:17468
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵PID:15640
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4776 -
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2244 -
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4696 -
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:5164
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:6396
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:10572
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"8⤵PID:4408
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:15048
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:3696
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:7956
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:22908
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:11560
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:8480
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:14856
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:19628
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:16432
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:6032
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:8052
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:15808
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:21656
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:11396
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:26916
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:14952
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:21040
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:7200
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:15268
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:20108
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:9876
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:18044
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:25824
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:15220
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:20972
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:4232
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:6232
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:12872
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:2384
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:14736
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:732
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:16840
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:7860
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:14968
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:19580
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:15676
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:11772
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:7804
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:14872
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:21468
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:5532
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:7292
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:13724
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:21616
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:9448
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:17660
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:22512
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:15284
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:20004
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:6804
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:15228
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:21728
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:8952
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:17424
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:22988
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:11520
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:18660
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:14880
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:19736
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:2344 -
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:5156
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:6292
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:10548
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:18240
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:7076
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:15080
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:19540
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:7812
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:17416
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:21188
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:11176
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:27132
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:14992
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:19588
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:16892
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:5920
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:7868
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:17808
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:22980
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:11236
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:22656
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:14792
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:19644
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:17172
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:7212
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:15180
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:19988
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:9960
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:6612
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:15244
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:21032
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵PID:1612
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:5860
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:8108
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:26552
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:10656
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:21640
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:15008
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:19612
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:17156
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:6224
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:10488
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:21680
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:15340
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:20736
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:8972
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:17784
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:22664
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:11388
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:25412
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:14644
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:1388
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:16124
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵PID:5560
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:7452
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:4780
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:21204
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:9348
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:26536
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:15260
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:21388
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵PID:6920
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:10468
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:22620
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:15156
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:1796
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵PID:8980
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:22576
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵PID:11568
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:8696
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵PID:14888
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵PID:19712
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3980 -
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:2268 -
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:5360
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:6560
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:9424
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"7⤵PID:22572
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:15324
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:20700
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:7276
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:18140
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:6988
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:11808
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:25772
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:14784
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:19704
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:5148
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:8220
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:15848
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:21648
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:8012
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:26884
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:14800
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:19500
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:7708
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:12676
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:25176
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:14628
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:17476
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:16824
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:11552
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:9496
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:14904
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:21416
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵PID:4324
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:6344
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:10532
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:27080
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:13212
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"6⤵PID:25188
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:14744
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:21372
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:7848
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:17244
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:22640
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:10408
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:18268
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:8104
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:15064
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:19484
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:16972
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵PID:5540
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:7744
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:17752
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:22500
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:10236
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:25204
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:15292
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:20028
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵PID:6796
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:12392
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:19172
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:28568
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:14696
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:4964
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵PID:8624
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:18252
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:6968
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵PID:12296
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:27048
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵PID:14816
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵PID:19620
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵PID:9560
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:940 -
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵PID:4772
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:6308
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:13972
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:14656
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:19224
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:16828
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:8116
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:14960
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:19548
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:16408
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:10580
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:21672
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:15040
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:3244
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:16244
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵PID:5936
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:8364
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:16816
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:22496
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:11820
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:8536
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:14760
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:19604
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:2912
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵PID:7284
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:15356
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:20712
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵PID:9328
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:17792
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:22520
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵PID:12912
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:25196
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵PID:14808
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵PID:19636
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵PID:18320
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"2⤵PID:4368
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵PID:6440
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:9432
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"5⤵PID:26984
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:15736
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:21492
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵PID:8076
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:800
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:21080
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵PID:11512
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:27024
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵PID:14928
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵PID:19680
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"2⤵PID:5548
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵PID:7652
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:15096
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:19532
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵PID:9996
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:27072
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵PID:15316
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵PID:21048
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"2⤵PID:6860
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵PID:10540
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"4⤵PID:21712
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵PID:15188
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵PID:21380
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"2⤵PID:8960
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵PID:27064
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"2⤵PID:12532
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"3⤵PID:6132
-
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"2⤵PID:14680
-
-
C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\bb97abb3ad120b9601155ae2aa6a07f0_NeikiAnalytics.exe"2⤵PID:21096
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\tyrkish cumshot lingerie masturbation sweet (Sonja,Tatjana).mpeg.exe
Filesize1.9MB
MD5702bd404dc251dd44d91cc3f04a7af4d
SHA11e135a2595a8cd117b96e26f2210f48dd387f272
SHA25676b5165f9eca5232c50f411c185e07fea08f97a262a22590290623feb96fdd89
SHA5124960a4252462b5dd770cb16b950bc27f5eae2d9520e43b89af8f456fe239d61dcff7667fbfc374c3e732c43a61270620fbab3f1d8346bff045b714b3f868bb1c
-
Filesize
146B
MD59baa1d3646d1fe3d19ffe1e796dc062f
SHA10be642df278c0cff4972fdea94e05e0efb76e400
SHA256a405165191dfa8f8efb61a7e5d2886bcabf6ef1e97dcf52ea282373ff773cc20
SHA512422f21bd1de8bc0e963d92b763dc35b04ec80e4c8630d1d78368d792e73e39f1a1622e3683a7c03b6d7d3c43edb0c036891866b21ae6fd41ba424761ddd5e153