Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
16s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
14/05/2024, 14:34
Behavioral task
behavioral1
Sample
cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe
-
Size
319KB
-
MD5
cabf87af5b651187272cc53d63e983a0
-
SHA1
1ff3c751355dab8a2234d8933b7bc64390796fac
-
SHA256
8fd967732e0d0cffbc46ee42727f0177ff0cf618cb8a350b6e87c4d662a1f030
-
SHA512
b666974c0e44217f44ba290b8db0d6f74f5fc1870fe8fbc284f36709d67bb95f8b3c1974f5ee10dd694c4f14c2460deb41f725edf4d497ff41040dacaa2026d9
-
SSDEEP
6144:xjluQoSqIo5R4nM/40yJNVWg0qmfc8W/W3gf4Rp4WS+Xud8TxhJWXvl9RM4y+uMv:xEQoS+qhTWg0Jfc3+3gfCp4B+ediJslD
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 16 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-3558294865-3673844354-2255444939-1000\Control Panel\International\Geo\Nation cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3558294865-3673844354-2255444939-1000\Control Panel\International\Geo\Nation cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3558294865-3673844354-2255444939-1000\Control Panel\International\Geo\Nation cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3558294865-3673844354-2255444939-1000\Control Panel\International\Geo\Nation cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3558294865-3673844354-2255444939-1000\Control Panel\International\Geo\Nation cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3558294865-3673844354-2255444939-1000\Control Panel\International\Geo\Nation cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3558294865-3673844354-2255444939-1000\Control Panel\International\Geo\Nation cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3558294865-3673844354-2255444939-1000\Control Panel\International\Geo\Nation cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3558294865-3673844354-2255444939-1000\Control Panel\International\Geo\Nation cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3558294865-3673844354-2255444939-1000\Control Panel\International\Geo\Nation cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3558294865-3673844354-2255444939-1000\Control Panel\International\Geo\Nation cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3558294865-3673844354-2255444939-1000\Control Panel\International\Geo\Nation cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3558294865-3673844354-2255444939-1000\Control Panel\International\Geo\Nation cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3558294865-3673844354-2255444939-1000\Control Panel\International\Geo\Nation cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3558294865-3673844354-2255444939-1000\Control Panel\International\Geo\Nation cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3558294865-3673844354-2255444939-1000\Control Panel\International\Geo\Nation cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
resource yara_rule behavioral2/memory/4408-0-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/files/0x000700000002340c-5.dat upx behavioral2/memory/2556-43-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/2876-157-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/3624-158-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/3800-185-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/4884-186-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/3748-187-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/4944-188-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/4668-189-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/4712-191-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/1572-190-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/1948-193-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/4408-192-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/4124-195-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/4524-196-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/2556-194-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/4836-198-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/2876-197-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/1156-200-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/3624-199-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/4884-204-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/2512-207-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/3748-206-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/3272-209-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/4944-208-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/4044-205-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/3800-202-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/3888-203-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/4668-210-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/1416-213-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/3056-212-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/4280-211-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/3360-216-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/4712-215-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/2568-218-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/1948-217-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/4124-219-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/1572-214-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/4524-220-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/328-223-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/2420-222-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/4836-221-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/3736-225-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/4184-226-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/1156-224-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/3888-227-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/4168-230-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/4044-228-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/4156-229-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/2512-234-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/340-248-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/1032-253-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/4396-252-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/1416-251-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/3056-250-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/4280-249-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/3460-247-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/816-246-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/3744-245-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/4924-244-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/3556-243-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/4976-242-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/4320-241-0x0000000000400000-0x000000000041D000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\A: cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File opened (read-only) \??\E: cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File opened (read-only) \??\K: cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File opened (read-only) \??\U: cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File opened (read-only) \??\G: cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File opened (read-only) \??\I: cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File opened (read-only) \??\O: cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File opened (read-only) \??\R: cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File opened (read-only) \??\Z: cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File opened (read-only) \??\B: cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File opened (read-only) \??\H: cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File opened (read-only) \??\M: cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File opened (read-only) \??\N: cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File opened (read-only) \??\Q: cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File opened (read-only) \??\T: cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File opened (read-only) \??\V: cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File opened (read-only) \??\W: cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File opened (read-only) \??\J: cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File opened (read-only) \??\L: cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File opened (read-only) \??\P: cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File opened (read-only) \??\S: cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File opened (read-only) \??\X: cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File opened (read-only) \??\Y: cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe -
Drops file in System32 directory 12 IoCs
description ioc Process File created C:\Windows\System32\DriverStore\Temp\danish beastiality fucking voyeur (Tatjana).mpg.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\System32\LogFiles\Fax\Incoming\beast [free] (Janette).mpeg.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\japanese action blowjob sleeping leather .avi.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\beast full movie (Melissa).avi.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\japanese gang bang hardcore voyeur hole granny .mpg.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\gay lesbian hotel (Christine,Tatjana).mpg.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\hardcore catfight (Curtney).avi.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\german bukkake lesbian (Samantha).rar.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\trambling licking .mpeg.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\indian action bukkake [free] cock .rar.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\horse lesbian (Samantha).avi.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\italian horse gay masturbation femdom .avi.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe -
Drops file in Program Files directory 18 IoCs
description ioc Process File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\horse lesbian penetration (Christine,Sarah).mpeg.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\italian handjob sperm full movie bedroom .zip.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\black nude sperm several models gorgeoushorny .mpeg.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\Temp\bukkake lesbian feet swallow .rar.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\Updates\Download\american gang bang lingerie [free] boots (Kathrin,Sarah).rar.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Temp\russian cum beast lesbian titts .zip.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Program Files\Common Files\microsoft shared\brasilian animal lingerie hot (!) cock stockings .mpeg.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft SQL Server\130\Shared\tyrkish beastiality beast masturbation .zip.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\PrintAndShare\black beastiality beast catfight beautyfull .mpeg.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\Microsoft Shared\lingerie licking .avi.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Update\Download\danish handjob fucking [free] .rar.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\Download\tyrkish horse bukkake hidden glans (Sonja,Melissa).mpg.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Program Files\dotnet\shared\black cumshot lingerie hidden glans penetration .mpg.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\Templates\hardcore sleeping glans ash (Janette).rar.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft SQL Server\130\Shared\sperm several models shower .avi.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\black animal trambling [bangbus] cock lady (Janette).mpeg.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\bukkake licking cock latex .mpg.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\black fetish lingerie [bangbus] wifey .mpg.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\WinSxS\amd64_microsoft-windows-i..ore-shareexperience_31bf3856ad364e35_10.0.19041.1_none_f42978969c79336a\tyrkish nude horse licking cock .zip.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_c3d467c525734eb3\african hardcore catfight high heels .avi.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_en-us_310bfb76047869ad\porn beast big hole .zip.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_ee7ea14f7d8a3ee3\italian handjob hardcore girls .avi.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-service-shared_31bf3856ad364e35_10.0.19041.1151_none_fbdc4c5f677dc2ec\handjob sperm public feet .zip.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..nearshareexperience_31bf3856ad364e35_10.0.19041.1_none_0b596e2a33be7d4c\brasilian kicking trambling voyeur glans .avi.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_62312bfbb33d478a\japanese cum horse [free] hole granny (Sarah).mpeg.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_10.0.19041.1_none_a7ad1894592cfa12\german fucking hidden .mpg.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-composable-sharepicker_31bf3856ad364e35_10.0.19041.1_none_c87e96327faffd0e\german lesbian lesbian blondie .rar.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_de-de_881b257d159a5de8\xxx girls feet bondage .zip.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_uk-ua_5b152a8d329397ec\cum gay [bangbus] latex .rar.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-a..gement-uevtemplates_31bf3856ad364e35_10.0.19041.1_none_0d66b54875835a49\danish nude trambling licking glans .mpg.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.1_none_9aa486d790131d4e\animal lesbian masturbation beautyfull .mpeg.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\security\templates\japanese cum blowjob licking .mpeg.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5fdc43acc1be690d\cumshot lingerie uncut .mpeg.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.1_none_a80cea873b2a6772\gay [milf] bedroom .avi.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.746_none_2212358fc33cc10f\french lingerie voyeur (Janette).mpeg.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\templates\danish fetish lesbian girls hole .rar.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost_31bf3856ad364e35_10.0.19041.264_none_cb389cf57d74d691\malaysia beast big latex .rar.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.746_none_d01527cffa9c25bc\indian nude blowjob sleeping boots (Kathrin,Liz).zip.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..s-ime-eashared-ihds_31bf3856ad364e35_10.0.19041.1_none_e8996b7d3512363f\african xxx lesbian feet ash (Melissa).mpg.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_it-it_4c5922428a6f2d08\chinese fucking public mistress .mpg.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.1_none_833abdc06c68d338\fetish lingerie several models feet .zip.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ces-ime-eashared-lm_31bf3856ad364e35_10.0.19041.1_none_3d0229d17c310f10\nude lingerie big ejaculation .avi.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\Downloaded Program Files\italian cum xxx licking sweet .mpeg.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\PLA\Templates\brasilian nude trambling voyeur .mpeg.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.UI.ShellCommon\SharePickerUI\japanese fetish sperm [free] feet (Sandy,Samantha).mpeg.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_it-it_adfc5e0bfca53431\italian action trambling several models cock sm .mpeg.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_it-it_bdb6c49fcea35732\canadian bukkake hot (!) glans castration (Samantha).zip.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.867_none_c29826784f9429f8\bukkake hidden ash .avi.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor.Resources\horse hidden granny .rar.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\Downloads\danish animal gay hidden hole .mpeg.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\inclusiveOobe\view\templates\xxx big cock girly .zip.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.84_none_81616275259e37fe\xxx public .zip.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.1_none_2fe79eae2833b9b1\malaysia horse hot (!) .mpg.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_10.0.19041.1_none_f07d4fae3e8e883f\african lingerie hot (!) girly (Christine,Tatjana).rar.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor.Resources\danish porn beast public (Melissa).mpeg.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\Downloads\xxx [bangbus] traffic (Sonja,Curtney).mpeg.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\swedish cum horse hidden granny .avi.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5021dd18efc0460c\spanish gay voyeur young .avi.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost_31bf3856ad364e35_10.0.19041.1202_none_621728fcd3c9d5f6\asian trambling masturbation (Sylvia).avi.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-service-shared_31bf3856ad364e35_10.0.19041.1_none_3cfd44d351b1a8ab\fucking sleeping boots .rar.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\italian cumshot horse catfight traffic .rar.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\assembly\tmp\russian cumshot fucking full movie lady .avi.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.1_none_0bc0f3d4cd7dc8fd\danish handjob fucking sleeping swallow .avi.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.844_none_855aff45853749ef\cumshot horse full movie .zip.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_es-es_bf79b5fcc06b3128\italian beastiality beast hidden balls .zip.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-h..public-utils-shared_31bf3856ad364e35_10.0.19041.1202_none_d8a1416ab7cccdcf\nude sperm [bangbus] hole shoes .mpg.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Templates\fucking voyeur hole .rar.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.867_en-us_49453482f1fb5356\swedish horse lesbian [bangbus] feet .zip.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.928_none_33e0d5558cdd7c61\swedish fetish lingerie sleeping .mpeg.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.746_none_1bbb9ab9fc52bac9\beastiality bukkake catfight stockings .rar.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..se-shared-datafiles_31bf3856ad364e35_10.0.19041.1_none_2f5f00d280dce9f6\spanish fucking masturbation feet beautyfull (Melissa).rar.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\mssrv.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\bukkake big lady .mpg.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\american cum trambling catfight lady .avi.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.1_none_5d54c0aac5c3c12c\nude trambling big glans pregnant .mpg.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor\gay public boots .rar.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_es-es_211cf1c632a13851\porn xxx masturbation glans upskirt (Curtney).mpg.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.844_none_67b5915b5651dd8a\lingerie public balls .mpg.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-h..public-utils-shared_31bf3856ad364e35_10.0.19041.1_none_19d22204a1f3fcaf\action gay several models beautyfull (Britney,Sylvia).zip.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..ore-shareexperience_31bf3856ad364e35_10.0.19041.964_none_1c1a193f5bfcf136\japanese beastiality horse voyeur feet (Sonja,Jade).mpeg.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\black horse xxx hot (!) .mpeg.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe File created C:\Windows\assembly\temp\swedish fetish beast big 50+ .rar.exe cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4408 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 4408 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 2556 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 2556 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 4408 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 4408 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 2876 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 2876 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 3624 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 3624 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 2556 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 2556 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 4408 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 4408 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 3800 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 3800 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 4884 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 4884 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 3748 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 3748 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 2556 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 2876 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 2556 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 2876 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 4408 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 4408 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 4944 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 4944 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 3624 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 3624 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 4668 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 4668 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 4712 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 4712 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 1572 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 1572 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 3800 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 3800 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 2876 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 2876 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 1948 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 1948 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 4408 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 2556 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 4408 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 2556 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 4524 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 4524 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 3624 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 3624 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 4884 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 4884 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 4836 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 4836 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 1156 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 1156 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 3748 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 3748 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 4944 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 4944 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 3888 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 3888 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 3800 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 3800 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 4408 wrote to memory of 2556 4408 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 85 PID 4408 wrote to memory of 2556 4408 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 85 PID 4408 wrote to memory of 2556 4408 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 85 PID 2556 wrote to memory of 2876 2556 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 86 PID 2556 wrote to memory of 2876 2556 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 86 PID 2556 wrote to memory of 2876 2556 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 86 PID 4408 wrote to memory of 3624 4408 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 87 PID 4408 wrote to memory of 3624 4408 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 87 PID 4408 wrote to memory of 3624 4408 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 87 PID 2876 wrote to memory of 3800 2876 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 90 PID 2876 wrote to memory of 3800 2876 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 90 PID 2876 wrote to memory of 3800 2876 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 90 PID 2556 wrote to memory of 4884 2556 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 91 PID 2556 wrote to memory of 4884 2556 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 91 PID 2556 wrote to memory of 4884 2556 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 91 PID 4408 wrote to memory of 3748 4408 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 92 PID 4408 wrote to memory of 3748 4408 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 92 PID 4408 wrote to memory of 3748 4408 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 92 PID 3624 wrote to memory of 4944 3624 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 93 PID 3624 wrote to memory of 4944 3624 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 93 PID 3624 wrote to memory of 4944 3624 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 93 PID 3800 wrote to memory of 4668 3800 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 94 PID 3800 wrote to memory of 4668 3800 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 94 PID 3800 wrote to memory of 4668 3800 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 94 PID 2876 wrote to memory of 1572 2876 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 95 PID 2876 wrote to memory of 1572 2876 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 95 PID 2876 wrote to memory of 1572 2876 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 95 PID 2556 wrote to memory of 4712 2556 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 96 PID 2556 wrote to memory of 4712 2556 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 96 PID 2556 wrote to memory of 4712 2556 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 96 PID 4408 wrote to memory of 1948 4408 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 97 PID 4408 wrote to memory of 1948 4408 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 97 PID 4408 wrote to memory of 1948 4408 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 97 PID 3624 wrote to memory of 4124 3624 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 98 PID 3624 wrote to memory of 4124 3624 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 98 PID 3624 wrote to memory of 4124 3624 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 98 PID 4884 wrote to memory of 4524 4884 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 99 PID 4884 wrote to memory of 4524 4884 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 99 PID 4884 wrote to memory of 4524 4884 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 99 PID 3748 wrote to memory of 4836 3748 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 100 PID 3748 wrote to memory of 4836 3748 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 100 PID 3748 wrote to memory of 4836 3748 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 100 PID 4944 wrote to memory of 1156 4944 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 101 PID 4944 wrote to memory of 1156 4944 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 101 PID 4944 wrote to memory of 1156 4944 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 101 PID 3800 wrote to memory of 3888 3800 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 102 PID 3800 wrote to memory of 3888 3800 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 102 PID 3800 wrote to memory of 3888 3800 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 102 PID 4408 wrote to memory of 4044 4408 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 103 PID 4408 wrote to memory of 4044 4408 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 103 PID 4408 wrote to memory of 4044 4408 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 103 PID 2556 wrote to memory of 2512 2556 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 104 PID 2556 wrote to memory of 2512 2556 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 104 PID 2556 wrote to memory of 2512 2556 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 104 PID 2876 wrote to memory of 3272 2876 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 105 PID 2876 wrote to memory of 3272 2876 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 105 PID 2876 wrote to memory of 3272 2876 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 105 PID 4668 wrote to memory of 4280 4668 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 106 PID 4668 wrote to memory of 4280 4668 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 106 PID 4668 wrote to memory of 4280 4668 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 106 PID 3748 wrote to memory of 3056 3748 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 107 PID 3748 wrote to memory of 3056 3748 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 107 PID 3748 wrote to memory of 3056 3748 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 107 PID 4884 wrote to memory of 1416 4884 cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe 108
Processes
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"1⤵
- Checks computer location settings
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4408 -
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2556 -
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2876 -
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3800 -
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4668 -
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:4280
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"7⤵PID:5876
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"8⤵PID:9832
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"9⤵PID:16900
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"8⤵PID:4080
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"7⤵PID:6360
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"8⤵PID:2832
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"8⤵PID:17636
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"7⤵PID:9808
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"8⤵PID:17456
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"7⤵PID:3136
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:4924
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"7⤵PID:9332
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"8⤵PID:17376
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"7⤵PID:14012
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:5140
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"7⤵PID:11640
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"8⤵PID:17012
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"7⤵PID:7504
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:8176
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"7⤵PID:368
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:10004
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"7⤵PID:14948
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:14212
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
PID:3888 -
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:5772
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"7⤵PID:8568
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"8⤵PID:16876
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"7⤵PID:13616
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:7136
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"7⤵PID:15516
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"7⤵PID:17392
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:9816
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"7⤵PID:16884
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:1680
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:3744
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:8132
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"7⤵PID:18932
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:11124
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"7⤵PID:17280
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:14136
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:6172
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:11684
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"7⤵PID:18924
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:2928
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:8356
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:18468
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:11228
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:7480
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:14080
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:1572 -
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:2420
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:5980
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"7⤵PID:11012
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"8⤵PID:2980
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"7⤵PID:14236
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:7348
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"7⤵PID:15492
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"7⤵PID:17644
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:9976
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"7⤵PID:16520
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:5760
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:1032
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:9176
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"7⤵PID:17288
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:13668
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:6196
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:11948
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"7⤵PID:9584
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:13996
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:2804
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:18532
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:10604
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:17244
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:14160
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:3272
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:5832
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:10380
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"7⤵PID:16608
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:14324
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:6352
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:15500
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:19516
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:9656
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:16892
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:2652
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:3556
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:8140
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:18540
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:10660
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:7500
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:13840
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:5132
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:11632
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:15632
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:13832
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:8160
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:18500
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:9944
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:7540
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:14220
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4884 -
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4524 -
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:4184
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:5136
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"7⤵PID:10760
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"8⤵PID:8520
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"7⤵PID:14260
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:7668
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"7⤵PID:18008
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:10688
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"7⤵PID:18524
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:14284
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:1988
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:9088
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"7⤵PID:16908
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:12420
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:13904
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:6476
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:14008
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:8532
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:17400
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:11928
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:13964
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:1416
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:3304
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:10612
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"7⤵PID:18556
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:14276
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:7628
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:15556
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:20508
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:10304
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:8296
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:14316
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:4976
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:7692
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:18000
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:10596
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:18492
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:14292
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:6108
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:11732
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:16512
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:14048
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:7532
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:17984
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:10436
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:6692
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:14144
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4712 -
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:328
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:5780
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:9948
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"7⤵PID:18548
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:1376
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:7188
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:18756
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:9968
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:17328
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:4784
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:3460
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:4988
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:18516
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:8600
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:9748
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:14204
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:6460
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:11724
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:16456
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:14064
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:8548
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:17920
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:11980
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:13824
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"3⤵PID:2512
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:5892
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:10668
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:17596
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:14112
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:7064
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:4084
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:9464
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:17336
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:6328
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"3⤵PID:4396
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:9164
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:1384
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:4984
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"3⤵PID:6164
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:12024
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:13940
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"3⤵PID:7592
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:18460
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"3⤵PID:10336
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:6572
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"3⤵PID:14180
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3624 -
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4944 -
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:1156 -
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:4168
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:5884
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"7⤵PID:10228
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"8⤵PID:16408
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"7⤵PID:636
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:6408
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"7⤵PID:1652
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"7⤵PID:17628
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:9824
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"7⤵PID:17464
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:4368
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:1140
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:6988
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"7⤵PID:8676
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:8204
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"7⤵PID:1372
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:2068
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:2796
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:7844
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"7⤵PID:17968
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:14124
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:8148
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:17936
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:11004
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:17432
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:14244
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:2568
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:5900
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:9384
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"7⤵PID:15916
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:4028
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:7172
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:20516
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:9932
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:16400
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:13648
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:3484
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:8184
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:16440
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:2368
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:6740
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:14168
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:4928
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:10920
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:8400
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:14252
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:8116
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:17944
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:8756
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:17416
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:14228
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
PID:4124 -
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:3736
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:5964
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:9624
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"7⤵PID:18484
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:6864
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:7180
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:15484
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:17252
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:10220
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:8508
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:13628
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:1596
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:7680
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:17960
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:10344
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:8472
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:14308
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:6188
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:4656
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:13912
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:8168
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:17952
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:10544
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:732
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:14192
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"3⤵PID:3360
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:5868
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:9924
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:17928
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:13816
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:7196
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:3084
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:15620
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:9916
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:5060
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:532
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"3⤵PID:960
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:7920
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:18452
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:10720
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:16740
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:14268
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"3⤵PID:6252
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:8968
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"3⤵PID:8364
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:17756
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"3⤵PID:11216
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:17424
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"3⤵PID:14100
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3748 -
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4836 -
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:4156
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:5648
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:9340
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"7⤵PID:17480
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:3100
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:7072
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:2132
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:9472
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:17296
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:4672
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:340
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:8984
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:16916
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:12468
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:13884
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:6468
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:12032
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:12212
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:13932
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:8540
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:17472
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:11936
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:13976
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"3⤵PID:3056
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:5956
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:10488
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:17440
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:14300
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:7112
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:13780
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:18912
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:9616
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:18476
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:6920
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"3⤵PID:4320
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:6716
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:18508
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:2280
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:15764
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:20968
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:4036
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"3⤵PID:5284
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:11956
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:13988
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"3⤵PID:8124
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:20984
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"3⤵PID:11240
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:20976
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"3⤵PID:14088
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:1948 -
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"3⤵PID:4728
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:5764
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:10044
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"6⤵PID:17448
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:3784
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:7148
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:15508
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:17608
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:9700
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:10680
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:8720
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"3⤵PID:816
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:6712
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:16468
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:11084
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:16416
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:6272
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"3⤵PID:6632
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:12460
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:13876
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"3⤵PID:8860
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:17992
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"3⤵PID:12492
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"3⤵PID:13892
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"2⤵PID:4044
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"3⤵PID:5824
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:8660
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:15772
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"5⤵PID:20996
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:14332
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"3⤵PID:7484
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:17976
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"3⤵PID:9960
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:16780
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"3⤵PID:13640
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"2⤵PID:880
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"3⤵PID:9156
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"4⤵PID:17272
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"3⤵PID:2888
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"2⤵PID:6260
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"3⤵PID:12268
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"3⤵PID:13920
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"2⤵PID:8524
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"3⤵PID:16392
-
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"2⤵PID:12044
-
-
C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cabf87af5b651187272cc53d63e983a0_NeikiAnalytics.exe"2⤵PID:13952
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\horse lesbian penetration (Christine,Sarah).mpeg.exe
Filesize308KB
MD5afb38884c36f6c43dc783191c7290b2d
SHA15dc0c2a59bc812802eb07b3945716a92e0706b43
SHA256f7a04bee24f2f4601c317bb93b6fe39ea16a51ae58b1f02a42c8fd3827357013
SHA51280e4b5cc2e4a2e54c8f03d0a8790b498cce4a44b7935d7aeb16f0e9aeee3294683e6be3a9761b9f58e59eaa126973e4e8f0325795df88ab949f19176e679f68f