Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
9s -
max time network
104s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
15/05/2024, 06:21
Behavioral task
behavioral1
Sample
9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe
-
Size
1.7MB
-
MD5
9522536e8f2a4a117b00ad1c7b017030
-
SHA1
3df5ed63528c870dfcd46d4ffbe8bc03bfae441d
-
SHA256
8800152b09df79fc7a3b2dabee09981f583a6ea1463973c1463b56eb3e42154b
-
SHA512
a33cb03d5417549db845628f5aa4a2829599ea6f9dbe1cc2ca27cd87f82349b264deb0760bdb93b9f9e52cda9b8a82197ca364228a1678bb39154414f5722150
-
SSDEEP
24576:ScgSHuZfMnEcr3bX+3ObwMuII4vHD2feyj0j4X1yJOc8Ps7useI6IEtpMWcD7ZBk:GIIfhcb7LwM/afquso53IEXMnD7Zy
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 5 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-3571316656-3665257725-2415531812-1000\Control Panel\International\Geo\Nation 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3571316656-3665257725-2415531812-1000\Control Panel\International\Geo\Nation 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3571316656-3665257725-2415531812-1000\Control Panel\International\Geo\Nation 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3571316656-3665257725-2415531812-1000\Control Panel\International\Geo\Nation 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3571316656-3665257725-2415531812-1000\Control Panel\International\Geo\Nation 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
resource yara_rule behavioral2/memory/4892-0-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/files/0x00070000000234a0-5.dat upx behavioral2/memory/5096-14-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/2228-142-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/2408-145-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/3636-165-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/1088-166-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/1560-167-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/2052-185-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/940-186-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/1112-188-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/4892-187-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5096-189-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/4220-190-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/532-192-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/464-193-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/2228-191-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/1672-196-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/3296-195-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/2408-194-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/2256-199-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/3636-198-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/1088-200-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/516-201-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/2144-205-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/4604-204-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/4036-203-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/1560-202-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/4936-207-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/2564-209-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/1688-211-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/940-210-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/2052-208-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/2004-206-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/1432-213-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/2740-214-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/1112-212-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/2120-216-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/4220-215-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/4596-219-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/464-218-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/532-217-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/3296-220-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/3360-222-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/1672-221-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5224-224-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/2256-223-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5292-226-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/516-225-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/2144-230-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5380-231-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/4604-229-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/4036-228-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5388-232-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5472-235-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5460-234-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/1688-236-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/2564-233-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/1432-237-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5616-239-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/2120-241-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5696-242-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/2680-240-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/2740-238-0x0000000000400000-0x000000000041F000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\X: 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File opened (read-only) \??\H: 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File opened (read-only) \??\J: 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File opened (read-only) \??\M: 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File opened (read-only) \??\O: 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File opened (read-only) \??\R: 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File opened (read-only) \??\U: 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File opened (read-only) \??\Y: 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File opened (read-only) \??\Z: 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File opened (read-only) \??\A: 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File opened (read-only) \??\E: 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File opened (read-only) \??\P: 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File opened (read-only) \??\Q: 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File opened (read-only) \??\S: 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File opened (read-only) \??\W: 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File opened (read-only) \??\V: 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File opened (read-only) \??\B: 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File opened (read-only) \??\G: 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File opened (read-only) \??\I: 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File opened (read-only) \??\K: 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File opened (read-only) \??\L: 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File opened (read-only) \??\T: 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File opened (read-only) \??\N: 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe -
Drops file in System32 directory 12 IoCs
description ioc Process File created C:\Windows\SysWOW64\config\systemprofile\american cumshot kicking sleeping cock .rar.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Windows\System32\DriverStore\Temp\swedish porn [bangbus] upskirt .zip.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\trambling gang bang sleeping hairy (Ashley,Tatjana).mpeg.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\brasilian fucking licking lady (Melissa).mpg.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\lesbian gay catfight nipples ¼ë (Gina,Janette).mpeg.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\handjob full movie feet boots .mpg.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Windows\System32\LogFiles\Fax\Incoming\canadian gay [bangbus] blondie .avi.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\horse fucking masturbation shower (Ashley).mpeg.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\beast hardcore girls hole (Britney).mpg.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\cumshot sleeping .avi.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\spanish xxx porn masturbation (Sonja,Jade).mpg.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\xxx trambling [bangbus] (Anniston).mpg.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe -
Drops file in Program Files directory 19 IoCs
description ioc Process File created C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\PrintAndShare\tyrkish trambling trambling catfight stockings .mpg.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\Templates\indian animal several models (Sarah,Anniston).mpeg.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft SQL Server\130\Shared\hardcore [free] (Sarah,Liz).zip.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\Updates\Download\fucking [milf] pregnant .zip.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\blowjob blowjob several models (Sarah,Curtney).zip.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\canadian trambling big .rar.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\american handjob animal voyeur vagina hotel .mpg.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Temp\brasilian trambling horse uncut swallow (Sonja,Karin).rar.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\Download\gay several models .mpeg.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\Temp\malaysia lesbian uncut .rar.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\Temp\EUB476.tmp\tyrkish trambling bukkake [milf] legs shower .avi.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Program Files\Common Files\microsoft shared\handjob action [milf] .zip.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Program Files\dotnet\shared\beastiality hidden .rar.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\animal fucking hidden cock hotel .avi.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\Microsoft Shared\japanese cum beast several models .mpg.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Update\Download\danish action beast full movie boobs (Sylvia,Karin).mpeg.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft SQL Server\130\Shared\chinese lesbian big .zip.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\norwegian xxx sleeping titts black hairunshaved .zip.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\danish lesbian full movie .mpeg.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe -
Drops file in Windows directory 28 IoCs
description ioc Process File created C:\Windows\SoftwareDistribution\Download\SharedFileCache\french sperm lingerie full movie feet leather .mpeg.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.ShellCommon.SharedResources\trambling lesbian bedroom .rar.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\chinese trambling fucking [milf] shower .mpeg.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Windows\assembly\temp\horse gang bang hidden .rar.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Windows\PLA\Templates\norwegian action [free] .avi.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\Downloads\italian gang bang sleeping boobs (Sandy,Christine).zip.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.UI.ShellCommon\SharePickerUI\hardcore masturbation beautyfull .rar.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Windows\mssrv.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Windows\InputMethod\SHARED\sperm xxx voyeur glans pregnant (Sonja,Anniston).mpg.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor\danish handjob [bangbus] ash traffic .mpeg.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\Downloads\malaysia beastiality fetish uncut vagina .rar.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\templates\malaysia trambling masturbation lady .avi.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\fucking horse several models titts (Sandy,Jenna).mpg.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Templates\canadian kicking [milf] .mpg.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\xxx gay hidden wifey .zip.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Windows\assembly\tmp\german cum cumshot masturbation sweet (Jade,Sonja).rar.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\inclusiveOobe\view\templates\spanish beastiality several models legs .rar.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Windows\Downloaded Program Files\tyrkish nude public girly (Britney).rar.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor\malaysia gay girls titts .rar.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor.Resources\cumshot masturbation bondage .avi.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\spanish porn full movie (Liz).mpeg.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\cumshot [milf] 50+ .mpg.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\french sperm beastiality hot (!) granny .mpg.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor.Resources\tyrkish sperm hot (!) redhair .avi.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\swedish xxx fetish girls .rar.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Templates\norwegian gang bang sleeping .mpeg.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Windows\CbsTemp\kicking girls (Sylvia).rar.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe File created C:\Windows\security\templates\spanish kicking hidden gorgeoushorny (Tatjana,Sandy).mpeg.exe 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 30 IoCs
pid Process 4892 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 4892 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 5096 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 5096 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 4892 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 4892 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 2228 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 2228 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 4892 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 4892 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 2408 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 2408 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 5096 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 5096 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 3636 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 3636 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 1088 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 1088 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 4892 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 4892 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 1560 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 1560 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 5096 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 5096 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 2228 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 2228 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 2004 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 2004 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 2408 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 2408 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 33 IoCs
description pid Process procid_target PID 4892 wrote to memory of 5096 4892 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 86 PID 4892 wrote to memory of 5096 4892 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 86 PID 4892 wrote to memory of 5096 4892 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 86 PID 4892 wrote to memory of 2228 4892 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 89 PID 4892 wrote to memory of 2228 4892 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 89 PID 4892 wrote to memory of 2228 4892 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 89 PID 5096 wrote to memory of 2408 5096 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 90 PID 5096 wrote to memory of 2408 5096 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 90 PID 5096 wrote to memory of 2408 5096 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 90 PID 4892 wrote to memory of 3636 4892 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 94 PID 4892 wrote to memory of 3636 4892 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 94 PID 4892 wrote to memory of 3636 4892 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 94 PID 5096 wrote to memory of 1088 5096 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 95 PID 5096 wrote to memory of 1088 5096 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 95 PID 5096 wrote to memory of 1088 5096 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 95 PID 2228 wrote to memory of 1560 2228 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 96 PID 2228 wrote to memory of 1560 2228 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 96 PID 2228 wrote to memory of 1560 2228 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 96 PID 2408 wrote to memory of 2004 2408 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 97 PID 2408 wrote to memory of 2004 2408 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 97 PID 2408 wrote to memory of 2004 2408 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 97 PID 3636 wrote to memory of 2052 3636 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 100 PID 3636 wrote to memory of 2052 3636 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 100 PID 3636 wrote to memory of 2052 3636 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 100 PID 4892 wrote to memory of 940 4892 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 101 PID 4892 wrote to memory of 940 4892 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 101 PID 4892 wrote to memory of 940 4892 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 101 PID 5096 wrote to memory of 1112 5096 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 102 PID 5096 wrote to memory of 1112 5096 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 102 PID 5096 wrote to memory of 1112 5096 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 102 PID 2228 wrote to memory of 4220 2228 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 103 PID 2228 wrote to memory of 4220 2228 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 103 PID 2228 wrote to memory of 4220 2228 9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe 103
Processes
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"1⤵
- Checks computer location settings
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4892 -
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:5096 -
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2408 -
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:2004 -
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:3296
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:5292
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"7⤵PID:6576
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"8⤵PID:11588
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"8⤵PID:16248
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"7⤵PID:8468
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"8⤵PID:16892
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"7⤵PID:10424
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"7⤵PID:15708
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:6220
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"7⤵PID:10704
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"7⤵PID:15652
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:7860
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"7⤵PID:15676
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:10392
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:14296
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:2740
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:6364
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"7⤵PID:10632
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"7⤵PID:14616
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:8056
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"7⤵PID:16328
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:10552
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:14476
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:5892
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:8884
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"7⤵PID:16908
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:11996
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:16592
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:6872
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:12788
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:8592
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:6156
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:12916
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:6132
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:532
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:2680
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:6420
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"7⤵PID:11580
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"7⤵PID:13612
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:8108
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"7⤵PID:15996
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:10672
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:14608
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:5960
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:8416
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:13932
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:7332
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:14484
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:9680
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:13220
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:1688
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:6280
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:11508
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:14992
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:7844
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:15700
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:10432
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:14332
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:5768
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:3900
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:17172
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:10728
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:14712
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:7000
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:12832
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:5876
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:9000
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:17540
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:11740
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:17400
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:1088 -
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:464
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:4596
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:6444
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"7⤵PID:10716
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"7⤵PID:15660
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:8216
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"7⤵PID:17184
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:11132
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:15396
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:3420
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:9868
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:13320
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:7552
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:14364
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:10152
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:13756
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:2564
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:6012
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:10560
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:15036
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:7956
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:16096
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:10524
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:14360
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:5780
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:9564
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:13328
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:6992
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:12852
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:5852
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:8748
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:17164
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:11796
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:14564
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"3⤵PID:1112
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:2120
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:6432
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:10568
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:14780
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:7560
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:17192
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:10684
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:14624
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:5172
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:10272
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:14120
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:7572
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:15200
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:7244
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:13996
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"3⤵PID:2144
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:5900
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:9876
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:12600
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:7104
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:13352
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:9528
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:12800
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:7380
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"3⤵PID:5616
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:7096
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:13304
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:6876
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:9180
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:12724
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:17900
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"3⤵PID:6984
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:12356
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:17756
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"3⤵PID:8780
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:16876
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"3⤵PID:12004
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"3⤵PID:16648
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2228 -
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:1560 -
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:1672
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:5224
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:6560
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"7⤵PID:12364
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"7⤵PID:18020
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:8316
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"7⤵PID:17104
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:10476
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:15824
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:6100
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:11960
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:16612
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:7880
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:15720
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:10500
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:4912
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:1432
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:6376
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:11324
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:16008
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:8048
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:15692
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:10740
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:14788
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:5952
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:10336
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:14048
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:6716
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:13244
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:6024
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:9232
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:12908
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:6080
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"3⤵PID:4220
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:3360
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:6604
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:12480
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:18076
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:8276
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:17152
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:11084
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:14404
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:512
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:10344
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:14324
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:7540
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:15368
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:10116
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:13740
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"3⤵PID:4936
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:6088
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:9672
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:13228
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:7212
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:13284
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:6808
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:9572
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:13144
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"3⤵PID:5696
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:7996
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:16292
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:10756
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:15024
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"3⤵PID:6972
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:12844
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:6008
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"3⤵PID:8944
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:16900
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"3⤵PID:12032
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"3⤵PID:16656
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3636 -
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"3⤵PID:2052
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:4604
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:6112
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:10096
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:14020
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:7436
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:13976
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:10040
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:13492
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:5552
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:7340
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:13268
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:9712
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:13212
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:6860
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:12340
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:17764
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:8856
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:16996
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:11840
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:15868
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"3⤵PID:2256
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:5380
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:6964
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:12816
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:1480
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:8732
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"6⤵PID:17300
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:12012
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:17348
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:6568
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:12276
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:16844
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:8480
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:16868
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:10624
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:15668
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"3⤵PID:5388
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:7068
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:12952
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:6084
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:9072
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:17624
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:11736
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:17080
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"3⤵PID:6588
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:11468
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:16064
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"3⤵PID:8204
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:16300
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"3⤵PID:11076
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"3⤵PID:15192
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"2⤵PID:940
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"3⤵PID:4036
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:6016
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:10232
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:13784
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:7220
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:12964
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:5584
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:9224
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:12924
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:5516
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"3⤵PID:5460
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:7580
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:14756
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:10224
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:13748
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"3⤵PID:6840
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:11628
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:4300
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"3⤵PID:8640
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:17144
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"3⤵PID:11516
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"3⤵PID:15876
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"2⤵PID:516
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"3⤵PID:5788
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:7792
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"5⤵PID:15684
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:10300
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:14248
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"3⤵PID:7148
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:12732
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:3664
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"3⤵PID:9188
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:5136
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"3⤵PID:12396
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"3⤵PID:17940
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"2⤵PID:5472
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"3⤵PID:7156
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:12824
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:5872
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"3⤵PID:7476
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"4⤵PID:548
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"3⤵PID:12420
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"3⤵PID:18028
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"2⤵PID:6700
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"3⤵PID:12712
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"3⤵PID:17892
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"2⤵PID:7656
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"3⤵PID:16016
-
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"2⤵PID:10720
-
-
C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9522536e8f2a4a117b00ad1c7b017030_NeikiAnalytics.exe"2⤵PID:14632
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\blowjob blowjob several models (Sarah,Curtney).zip.exe
Filesize1.7MB
MD5c131557b6b2657a324e8c9a544faf353
SHA1f37da1c61bc903998021012e40ad9d7ab5fafdd7
SHA2563e7938790f80f5d06097be8a64db28c4836f9824ee2f1640f731f04f256f5728
SHA51277a84cdcd24b50e495eca08f3ba8c6e53e7ca4fd38d6de14efa382ba1f3f763b54ab6be6bbb335a658139f0cbc116f442bbad5008b47044efdf600d86e17bada