Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
16s -
max time network
105s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
15/05/2024, 03:57
Behavioral task
behavioral1
Sample
7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe
-
Size
284KB
-
MD5
7676224647523db2404eb4b86a4af860
-
SHA1
78afce8a2b9a7ef2c144cd235854929e42eda05a
-
SHA256
0299c7827839088c2975c7bf455b844354e7abfdf158f2bed930998396ece207
-
SHA512
898c7be16fa534f65ca8143bb0afd2c6a67fd5bfe6eacdf274ab5475e6214bb0ac3ec296324de62b78d76162b6f51aa0a69169ac2a0974963934992bcecbf308
-
SSDEEP
6144:VjluQoSiIo5RuUaZdcqs2S38Q/oVbOnLIkz+lRJqwcJUCO:VEQoSmSUGdUp3d/rnLRaqDW
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 16 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
resource yara_rule behavioral2/memory/1488-0-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/files/0x000700000002340d-5.dat upx behavioral2/memory/4368-12-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/4360-150-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/3212-152-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/2100-174-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/3508-177-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/1964-178-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/4224-184-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/1564-188-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/4052-189-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/2092-191-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/1488-190-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/4368-192-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/4360-195-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5060-194-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/1172-197-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/3212-196-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/4048-193-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/8-199-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/2100-198-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/4936-201-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/3508-200-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/1964-203-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/1944-204-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/4224-205-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/4584-209-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/1564-208-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/772-207-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/620-206-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/4212-212-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/452-211-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/4052-210-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/2592-215-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/2800-214-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/2092-213-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/4432-218-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/4048-216-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/2888-219-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/4980-222-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/1744-221-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/1172-220-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5060-217-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/3368-226-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/512-228-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/3144-225-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/8-224-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/2064-223-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/4936-227-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/4260-233-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/1944-232-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/1748-251-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/4584-250-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/772-249-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/620-248-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/2880-247-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5088-246-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/3244-245-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/2384-244-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/3252-243-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/4688-242-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/1664-241-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/4724-240-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/2968-239-0x0000000000400000-0x000000000041F000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\Y: 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File opened (read-only) \??\G: 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File opened (read-only) \??\M: 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File opened (read-only) \??\Q: 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File opened (read-only) \??\S: 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File opened (read-only) \??\T: 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File opened (read-only) \??\W: 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File opened (read-only) \??\H: 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File opened (read-only) \??\I: 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File opened (read-only) \??\J: 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File opened (read-only) \??\P: 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File opened (read-only) \??\V: 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File opened (read-only) \??\U: 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File opened (read-only) \??\Z: 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File opened (read-only) \??\A: 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File opened (read-only) \??\B: 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File opened (read-only) \??\E: 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File opened (read-only) \??\K: 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File opened (read-only) \??\N: 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File opened (read-only) \??\R: 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File opened (read-only) \??\L: 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File opened (read-only) \??\O: 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File opened (read-only) \??\X: 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe -
Drops file in System32 directory 12 IoCs
description ioc Process File created C:\Windows\SysWOW64\config\systemprofile\fucking full movie pregnant .avi.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\System32\DriverStore\Temp\fetish voyeur sm (Sandy,Gina).avi.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\swedish handjob horse lesbian mature .zip.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\beast uncut (Janette).zip.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\System32\LogFiles\Fax\Incoming\asian blowjob action [bangbus] .mpeg.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\italian cum horse licking gorgeoushorny (Sylvia,Kathrin).mpg.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\black animal lesbian pregnant .avi.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\indian bukkake horse licking circumcision .rar.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\british hardcore licking castration .mpg.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\italian fucking handjob girls .rar.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\tyrkish porn lesbian leather .zip.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\spanish lesbian lingerie hot (!) traffic .mpg.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe -
Drops file in Program Files directory 18 IoCs
description ioc Process File created C:\Program Files\Common Files\microsoft shared\xxx handjob sleeping mistress (Christine,Christine).rar.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Program Files\dotnet\shared\bukkake [milf] young .mpg.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Temp\spanish hardcore xxx licking legs shower .rar.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Update\Download\sperm public vagina pregnant .zip.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\russian bukkake lesbian [milf] (Janette).rar.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft SQL Server\130\Shared\norwegian gang bang several models ash (Kathrin).zip.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\american hardcore sperm girls legs ejaculation .mpg.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\swedish kicking masturbation titts .rar.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\bukkake full movie redhair .rar.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\fucking girls hole 40+ .rar.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\Download\canadian beast animal [free] nipples .rar.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\Temp\spanish fucking [bangbus] .rar.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\Templates\german porn several models castration (Britney,Liz).zip.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft SQL Server\130\Shared\nude trambling uncut hairy .avi.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\Updates\Download\indian action hardcore catfight bondage .mpg.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\PrintAndShare\japanese cum nude [bangbus] circumcision .mpg.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\italian cum [free] nipples penetration (Ashley).mpg.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\Microsoft Shared\lesbian lesbian bedroom (Jade).mpg.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\ServiceProfiles\LocalService\Downloads\porn girls (Christine,Janette).avi.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_en-us_215194e2327a46ac\french sperm hardcore hidden bondage (Jenna).mpeg.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.867_en-us_49453482f1fb5356\nude hardcore [milf] 50+ .mpg.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.928_none_33e0d5558cdd7c61\russian hardcore hidden Ôï .mpeg.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost_31bf3856ad364e35_10.0.19041.264_none_cb389cf57d74d691\canadian nude [bangbus] legs black hairunshaved .mpg.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\fucking voyeur boobs bondage .mpeg.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\InputMethod\SHARED\japanese blowjob hidden .rar.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\security\templates\chinese horse girls sm (Anniston).avi.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.UI.ShellCommon\SharePickerUI\black lingerie public shower .avi.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-composable-sharepicker_31bf3856ad364e35_10.0.19041.1_none_c87e96327faffd0e\japanese trambling catfight .mpeg.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\swedish handjob lingerie [milf] castration (Britney,Melissa).rar.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor\asian action [bangbus] .avi.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_d38ece58f77171b4\lesbian sperm voyeur .mpeg.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.844_none_67b5915b5651dd8a\indian handjob [bangbus] ash .zip.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.746_none_d01527cffa9c25bc\action catfight wifey .mpg.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor.Resources\sperm kicking public .avi.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Templates\german horse catfight .mpeg.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_es-es_bf79b5fcc06b3128\german gay masturbation feet mistress .rar.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Templates\lesbian action full movie ejaculation .zip.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-b..-bcdtemplate-client_31bf3856ad364e35_10.0.19041.1_none_de1581e9a275faf8\indian animal kicking sleeping girly .mpg.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.746_none_ab42fb092bda9182\norwegian xxx trambling uncut wifey .zip.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..s-ime-eashared-ihds_31bf3856ad364e35_10.0.19041.1_none_e8996b7d3512363f\fucking licking titts pregnant .zip.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_ee7ea14f7d8a3ee3\tyrkish blowjob handjob catfight (Janette,Anniston).mpg.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\assembly\temp\nude nude several models bondage .mpeg.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5fdc43acc1be690d\swedish kicking beast licking (Britney).zip.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_uk-ua_5b152a8d329397ec\porn beastiality public (Curtney,Janette).zip.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-ime-eashared-proxy_31bf3856ad364e35_10.0.19041.1_none_4c786ae2f508e6d5\japanese bukkake action full movie ash .mpeg.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.746_none_2212358fc33cc10f\xxx lesbian (Sarah,Sonja).rar.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.ShellCommon.SharedResources\malaysia fetish [bangbus] hole .zip.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_it-it_bdb6c49fcea35732\beast hidden boobs .rar.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.844_none_855aff45853749ef\danish trambling hidden (Jenna).avi.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.867_none_c29826784f9429f8\lingerie voyeur .mpg.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\handjob sperm public legs .mpg.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\templates\sperm catfight titts 50+ .rar.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.1_none_f3b35d713ce0fc7f\trambling full movie nipples .avi.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_10.0.19041.1_none_f07d4fae3e8e883f\gay animal uncut blondie .mpg.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_10.0.19041.572_none_cf90e12518baac85\norwegian blowjob cum girls hotel .avi.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\SharedFileCache\black fetish blowjob licking circumcision .avi.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.1_none_833abdc06c68d338\swedish fetish beast lesbian (Gina).mpg.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-a..gement-uevtemplates_31bf3856ad364e35_10.0.19041.1_none_0d66b54875835a49\black gay beastiality full movie ejaculation .avi.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_de-de_7860bee9439c3ae7\porn xxx voyeur (Melissa,Sonja).avi.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.789_en-us_58ebf9ecc407e3c0\canadian animal sleeping legs gorgeoushorny (Sonja,Janette).mpg.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_en-us_bfae5918c0443f83\cumshot sleeping ejaculation (Sandy).mpg.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_62312bfbb33d478a\japanese lesbian nude public (Samantha).mpeg.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_it-it_4c5922428a6f2d08\bukkake voyeur black hairunshaved .rar.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_c3d467c525734eb3\norwegian animal public nipples penetration .avi.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.1_none_9aa486d790131d4e\brasilian nude hidden leather .mpg.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\handjob public .zip.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.746_none_1bbb9ab9fc52bac9\beastiality catfight circumcision (Janette,Tatjana).rar.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.1_none_2fe79eae2833b9b1\canadian fucking [free] shoes .mpg.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\Downloaded Program Files\malaysia cum hot (!) ejaculation (Sylvia,Sylvia).zip.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\Downloads\horse kicking big .avi.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.1_none_a80cea873b2a6772\canadian beastiality porn [bangbus] feet (Kathrin).mpeg.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..se-shared-datafiles_31bf3856ad364e35_10.0.19041.1_none_2f5f00d280dce9f6\fucking hidden wifey .mpeg.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5021dd18efc0460c\malaysia gay several models bondage .mpg.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_es-es_30d7585a049f5b52\swedish lesbian big shoes .mpg.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_es-es_211cf1c632a13851\black blowjob kicking [bangbus] (Sarah,Anniston).mpg.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.1_none_0bc0f3d4cd7dc8fd\gay bukkake catfight .rar.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_en-us_310bfb76047869ad\spanish gang bang voyeur .mpg.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.1_none_fa09f84703cb02c5\handjob gang bang licking mature .zip.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_de-de_16bd831fd16633be\danish nude licking vagina redhair .mpg.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\xxx nude catfight nipples .mpg.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor\nude fetish masturbation boobs (Sonja).mpg.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe File created C:\Windows\CbsTemp\xxx [free] gorgeoushorny .mpg.exe 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 1488 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 1488 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 4368 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 4368 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 1488 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 1488 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 4360 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 4360 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 3212 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 3212 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 1488 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 1488 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 4368 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 4368 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 2100 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 2100 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 3508 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 3508 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 1488 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 1488 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 4360 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 4360 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 1964 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 1964 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 4224 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 4224 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 4368 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 4368 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 3212 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 3212 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 1564 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 1564 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 4052 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 4052 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 1488 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 1488 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 2092 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 2092 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 4048 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 4048 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 2100 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 2100 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 4360 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 4360 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 1172 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 1172 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 3508 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 3508 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 4368 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 4368 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 8 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 8 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 3212 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 3212 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 4936 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 4936 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 1964 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 1964 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 4224 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 4224 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 1944 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 1944 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 1488 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 1488 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 1488 wrote to memory of 4368 1488 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 87 PID 1488 wrote to memory of 4368 1488 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 87 PID 1488 wrote to memory of 4368 1488 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 87 PID 1488 wrote to memory of 4360 1488 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 89 PID 1488 wrote to memory of 4360 1488 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 89 PID 1488 wrote to memory of 4360 1488 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 89 PID 4368 wrote to memory of 3212 4368 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 90 PID 4368 wrote to memory of 3212 4368 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 90 PID 4368 wrote to memory of 3212 4368 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 90 PID 1488 wrote to memory of 2100 1488 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 91 PID 1488 wrote to memory of 2100 1488 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 91 PID 1488 wrote to memory of 2100 1488 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 91 PID 4360 wrote to memory of 3508 4360 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 92 PID 4360 wrote to memory of 3508 4360 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 92 PID 4360 wrote to memory of 3508 4360 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 92 PID 4368 wrote to memory of 1964 4368 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 93 PID 4368 wrote to memory of 1964 4368 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 93 PID 4368 wrote to memory of 1964 4368 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 93 PID 3212 wrote to memory of 4224 3212 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 94 PID 3212 wrote to memory of 4224 3212 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 94 PID 3212 wrote to memory of 4224 3212 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 94 PID 1488 wrote to memory of 1564 1488 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 95 PID 1488 wrote to memory of 1564 1488 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 95 PID 1488 wrote to memory of 1564 1488 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 95 PID 4360 wrote to memory of 4052 4360 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 96 PID 4360 wrote to memory of 4052 4360 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 96 PID 4360 wrote to memory of 4052 4360 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 96 PID 2100 wrote to memory of 2092 2100 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 97 PID 2100 wrote to memory of 2092 2100 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 97 PID 2100 wrote to memory of 2092 2100 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 97 PID 3508 wrote to memory of 4048 3508 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 98 PID 3508 wrote to memory of 4048 3508 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 98 PID 3508 wrote to memory of 4048 3508 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 98 PID 4368 wrote to memory of 5060 4368 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 99 PID 4368 wrote to memory of 5060 4368 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 99 PID 4368 wrote to memory of 5060 4368 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 99 PID 3212 wrote to memory of 1172 3212 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 100 PID 3212 wrote to memory of 1172 3212 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 100 PID 3212 wrote to memory of 1172 3212 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 100 PID 1964 wrote to memory of 8 1964 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 101 PID 1964 wrote to memory of 8 1964 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 101 PID 1964 wrote to memory of 8 1964 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 101 PID 4224 wrote to memory of 4936 4224 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 102 PID 4224 wrote to memory of 4936 4224 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 102 PID 4224 wrote to memory of 4936 4224 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 102 PID 1488 wrote to memory of 1944 1488 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 103 PID 1488 wrote to memory of 1944 1488 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 103 PID 1488 wrote to memory of 1944 1488 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 103 PID 2100 wrote to memory of 620 2100 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 104 PID 2100 wrote to memory of 620 2100 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 104 PID 2100 wrote to memory of 620 2100 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 104 PID 4360 wrote to memory of 772 4360 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 105 PID 4360 wrote to memory of 772 4360 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 105 PID 4360 wrote to memory of 772 4360 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 105 PID 3508 wrote to memory of 4584 3508 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 106 PID 3508 wrote to memory of 4584 3508 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 106 PID 3508 wrote to memory of 4584 3508 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 106 PID 4368 wrote to memory of 452 4368 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 107 PID 4368 wrote to memory of 452 4368 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 107 PID 4368 wrote to memory of 452 4368 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 107 PID 3212 wrote to memory of 4212 3212 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 108 PID 3212 wrote to memory of 4212 3212 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 108 PID 3212 wrote to memory of 4212 3212 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 108 PID 4224 wrote to memory of 2800 4224 7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe 109
Processes
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"1⤵
- Checks computer location settings
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1488 -
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4368 -
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3212 -
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4224 -
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4936 -
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:3144
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"7⤵PID:5636
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"8⤵PID:9348
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"9⤵PID:17824
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"8⤵PID:12360
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"8⤵PID:16952
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"7⤵PID:6084
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"8⤵PID:14052
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"7⤵PID:9588
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"8⤵PID:18672
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"7⤵PID:12220
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"7⤵PID:16928
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:5088
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"7⤵PID:8812
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"8⤵PID:18552
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"7⤵PID:12600
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"7⤵PID:16832
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:6676
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"7⤵PID:12204
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"7⤵PID:16716
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:6240
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"7⤵PID:13184
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"7⤵PID:20780
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:8900
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"7⤵PID:18680
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:12488
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:17044
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:2800
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:5968
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"7⤵PID:12336
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"7⤵PID:16800
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:7016
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"7⤵PID:14028
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:9280
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"7⤵PID:18452
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:12320
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:16152
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:1748
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:1308
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"7⤵PID:14516
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:9540
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"7⤵PID:17864
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:12432
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:17012
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:6572
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:12344
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:16976
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:6228
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:14036
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:9180
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:18528
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:12552
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:17160
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:1172 -
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:3368
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:6048
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"7⤵PID:12328
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"7⤵PID:16904
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:7008
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"7⤵PID:14020
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:9796
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"7⤵PID:18460
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:12392
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:17088
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:4724
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:8448
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"7⤵PID:18696
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:12592
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:16816
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:6392
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:10996
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:16912
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:6252
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:14004
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:8656
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:18600
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:12536
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:17144
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:4212
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:6100
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:11296
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:11268
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:16896
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:6744
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:13972
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:9288
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:17568
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:12440
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:17080
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:3252
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:7412
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:18444
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:12772
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:17816
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:6556
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:13288
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:19240
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:6488
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:12632
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:1612
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:9240
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:19156
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:12268
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:16700
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1964 -
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:8 -
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:512
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:5644
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"7⤵PID:12576
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"7⤵PID:16144
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:5996
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"7⤵PID:10732
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"7⤵PID:19200
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:9256
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"7⤵PID:17872
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:12528
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:16848
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:2708
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:8604
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"7⤵PID:18480
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:12616
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:17136
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:6164
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:12188
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:16748
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:2212
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:14012
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:9304
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:17848
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:12376
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:17428
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:4432
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:5804
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:4304
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:4884
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:4592
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:14044
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:9320
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:20024
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:12416
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:16996
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:3244
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:8432
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:18520
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:12680
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:1476
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:6668
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:12688
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:16452
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:6152
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:18704
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:9052
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:18816
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:12240
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:3756
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"3⤵
- Checks computer location settings
PID:5060 -
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:4980
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:5664
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:12672
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:2788
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:3712
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:14372
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:9036
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:18472
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:12228
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:16936
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:4260
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:7020
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:13280
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:19192
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:9012
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:18968
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:12520
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:17152
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:6356
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:12748
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:16288
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:6544
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:14348
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:8940
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:18568
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:12424
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:16944
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"3⤵PID:452
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:6064
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:12304
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:17112
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:6088
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:14540
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:9272
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:12408
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:16968
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"3⤵PID:2880
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:8456
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:18576
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:12696
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:17840
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"3⤵PID:6548
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:10664
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:14500
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:11284
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:16920
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"3⤵PID:6148
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:14376
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"3⤵PID:9044
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:18124
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"3⤵PID:12496
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"3⤵PID:16792
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4360 -
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3508 -
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4048 -
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:1744
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:5796
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"7⤵PID:12756
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"7⤵PID:4412
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:3200
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"7⤵PID:14412
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:9296
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"7⤵PID:18544
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:12368
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:16740
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:1228
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:8416
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"7⤵PID:18584
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:12656
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:17128
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:6348
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:12732
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:12940
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:1104
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:14068
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:10236
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:17856
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:12384
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:16984
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:4584
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:6076
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:11332
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:16768
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:6892
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:14508
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:9224
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:17880
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:12252
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:17004
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:4688
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:8848
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:17944
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:12584
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:17060
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:6408
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:12720
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:16692
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:6296
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:14708
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:9028
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:20620
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:12504
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:17068
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4052 -
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:2064
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:5788
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:13272
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:19216
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:3772
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:14060
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:10112
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:19492
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:12212
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:16888
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:3960
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:8424
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:18824
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:12712
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:19184
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:6368
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:12176
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:16872
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:6484
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:14076
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:9232
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:18496
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:12260
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:17120
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"3⤵PID:772
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:6092
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:12312
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:16960
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:4508
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:14716
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:9264
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:17480
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:12400
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:17936
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"3⤵PID:4964
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:8308
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:19132
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:12764
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:17832
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"3⤵PID:6424
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:12296
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:16724
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"3⤵PID:6212
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:12648
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:16708
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"3⤵PID:9160
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:18688
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"3⤵PID:12472
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"3⤵PID:17104
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2100 -
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:2092 -
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:2888
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:6056
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:12704
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:17808
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:2984
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:14736
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:10316
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:16364
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:760
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:16128
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:1664
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:8592
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"6⤵PID:19176
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:13304
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:19224
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:6400
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:12608
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:16824
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:6204
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:12568
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:16864
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:9168
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:18840
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:12480
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:16856
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"3⤵PID:620
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:5732
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:12560
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:17036
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:3568
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:12640
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:17028
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:9248
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:18832
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:12276
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:16460
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"3⤵PID:2588
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:8408
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:18852
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:12624
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:17420
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"3⤵PID:5752
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:10380
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:10724
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:17800
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"3⤵PID:6736
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:14108
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"3⤵PID:9568
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:18512
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"3⤵PID:12448
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"3⤵PID:16776
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:1564 -
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"3⤵PID:2592
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:5932
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:11348
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:3816
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:5332
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:19208
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:9312
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:18560
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:12236
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:16880
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"3⤵PID:2384
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:8440
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:18536
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:12664
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:17052
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"3⤵PID:6416
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:12456
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:17096
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"3⤵PID:5992
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:13296
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:19232
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"3⤵PID:8504
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:19248
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"3⤵PID:12464
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"3⤵PID:16808
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
PID:1944 -
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"3⤵PID:5832
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:8080
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"5⤵PID:18608
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:7396
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:16760
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"3⤵PID:4276
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:14816
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"3⤵PID:9024
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:18504
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"3⤵PID:12512
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"3⤵PID:16840
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"2⤵PID:2968
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"3⤵PID:8316
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"4⤵PID:18592
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"3⤵PID:12740
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"3⤵PID:17020
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"2⤵PID:6432
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"3⤵PID:12352
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"3⤵PID:16784
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"2⤵PID:6524
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"3⤵PID:13996
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"2⤵PID:9508
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"3⤵PID:18488
-
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"2⤵PID:12544
-
-
C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\7676224647523db2404eb4b86a4af860_NeikiAnalytics.exe"2⤵PID:16732
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\fucking girls hole 40+ .rar.exe
Filesize2.0MB
MD5a355e5fbb21a92c96f34b6e5d2b27478
SHA1af809101e2248b8269f9d74d9219e95f2323b2b4
SHA256966c9447cf1e3685929a7b0dc7fa1a3de57b282b255087c0205714d47d8444d1
SHA51255ea8303e1343d3ecda974e64da2cddbe0573644ca9abc97ec0361481fdfd8d76a76976d02dc064edaec7557ea07b1f8d7c2887efdd9ea3fc5da87dc619d8b2f