Analysis
-
max time kernel
16s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
15/05/2024, 11:05
Static task
static1
Behavioral task
behavioral1
Sample
cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe
-
Size
953KB
-
MD5
cd60f86cd11590e346faf03536daeb40
-
SHA1
c3e3bcc0acdb84d7ee5d10c568fad95cd13560e5
-
SHA256
219684c0ead6416e4a54f37c0d8c2d9b4c56a79446bd35da6aee072df2612b18
-
SHA512
028dbbaa5c50667e19dd48bf1ef0f715da1308455ee971731943cb987604d302332eb8efdaa6463bcbf444004d484057a48e3baf76adeda78a101314f654a4af
-
SSDEEP
24576:oW6xcpk8H07vAGyISf/XLOyhJXrIKMvjKtBp:VEcpDQArn7pprItvjKtBp
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 16 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\Control Panel\International\Geo\Nation cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\B: cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File opened (read-only) \??\I: cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File opened (read-only) \??\J: cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File opened (read-only) \??\K: cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File opened (read-only) \??\M: cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File opened (read-only) \??\O: cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File opened (read-only) \??\Q: cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File opened (read-only) \??\S: cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File opened (read-only) \??\H: cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File opened (read-only) \??\L: cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File opened (read-only) \??\P: cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File opened (read-only) \??\W: cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File opened (read-only) \??\X: cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File opened (read-only) \??\Y: cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File opened (read-only) \??\A: cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File opened (read-only) \??\N: cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File opened (read-only) \??\T: cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File opened (read-only) \??\U: cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File opened (read-only) \??\Z: cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File opened (read-only) \??\E: cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File opened (read-only) \??\G: cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File opened (read-only) \??\R: cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File opened (read-only) \??\V: cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe -
Drops file in System32 directory 12 IoCs
description ioc Process File created C:\Windows\SysWOW64\FxsTmp\handjob kicking several models circumcision (Karin,Karin).avi.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\System32\LogFiles\Fax\Incoming\brasilian blowjob [bangbus] femdom .mpeg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\russian lesbian horse hot (!) boobs .zip.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\asian fucking sleeping wifey .rar.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\indian action cumshot hidden (Samantha).rar.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\norwegian fetish [free] .mpeg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\System32\DriverStore\Temp\lesbian nude hot (!) hole .mpg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\african hardcore cumshot [milf] .mpg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\brasilian beastiality horse hot (!) .mpg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\norwegian lesbian xxx several models boobs boots .avi.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\malaysia handjob voyeur femdom (Curtney,Curtney).zip.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\german gay girls .avi.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe -
Drops file in Program Files directory 18 IoCs
description ioc Process File created C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\Download\japanese sperm kicking uncut shoes (Tatjana,Melissa).zip.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Program Files\Common Files\microsoft shared\malaysia bukkake blowjob voyeur .mpg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft SQL Server\130\Shared\african beast licking hole girly (Sandy,Kathrin).mpg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\black action bukkake licking hole .mpeg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\japanese hardcore uncut hotel .rar.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft SQL Server\130\Shared\cumshot gay hot (!) .avi.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\PrintAndShare\spanish action gay masturbation bedroom .mpeg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\Microsoft Shared\american nude sperm [free] sm .rar.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\russian nude lesbian sweet (Anniston,Anniston).zip.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Temp\brasilian gang bang gang bang uncut circumcision .mpeg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Update\Download\hardcore gang bang public .avi.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\Temp\bukkake blowjob big bondage .avi.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\beast uncut .mpeg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\russian fetish hot (!) high heels .rar.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\Updates\Download\gang bang licking gorgeoushorny .rar.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Program Files\dotnet\shared\american lingerie uncut .zip.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\Templates\tyrkish beastiality fucking several models .zip.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\chinese kicking full movie glans ejaculation .mpg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\WinSxS\amd64_microsoft-windows-d..se-shared-datafiles_31bf3856ad364e35_10.0.19041.1_none_2f5f00d280dce9f6\russian gang bang animal sleeping .avi.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-h..public-utils-shared_31bf3856ad364e35_10.0.19041.1_none_19d22204a1f3fcaf\british sperm cum girls circumcision (Liz).mpeg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..ore-shareexperience_31bf3856ad364e35_10.0.19041.964_none_1c1a193f5bfcf136\tyrkish xxx lesbian hole .zip.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_10.0.19041.1_none_c6da8048542fddc7\asian handjob uncut 50+ .mpeg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-m..ineshared.resources_31bf3856ad364e35_10.0.19041.1_en-us_99ddc8ce8d3d6dac\blowjob catfight (Liz,Sandy).mpeg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\security\templates\chinese bukkake big hotel (Tatjana,Anniston).zip.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_es-es_211cf1c632a13851\german porn hot (!) mistress .mpg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5021dd18efc0460c\fucking lesbian feet redhair .mpg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.UI.ShellCommon\SharePickerUI\german animal action [bangbus] .mpeg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.844_none_855aff45853749ef\swedish cumshot licking .mpg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.1_none_f3b35d713ce0fc7f\kicking horse big high heels .mpg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.1_none_fa09f84703cb02c5\bukkake catfight ash mistress .mpg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_it-it_4c5922428a6f2d08\tyrkish blowjob [bangbus] femdom .avi.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\kicking nude licking boobs redhair (Kathrin).mpg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\InputMethod\SHARED\hardcore hot (!) .rar.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\templates\kicking porn uncut ash sweet .mpeg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..nearshareexperience_31bf3856ad364e35_10.0.19041.1288_none_ca3007304990b2ea\chinese hardcore lesbian .rar.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost_31bf3856ad364e35_10.0.19041.264_none_cb389cf57d74d691\japanese horse gay masturbation swallow (Sarah).avi.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-b..-bcdtemplate-client_31bf3856ad364e35_10.0.19041.1_none_de1581e9a275faf8\norwegian horse cum several models .mpg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.1_none_a80cea873b2a6772\canadian sperm big .avi.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.1_none_0bc0f3d4cd7dc8fd\malaysia nude full movie titts gorgeoushorny .mpg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.928_none_33e0d5558cdd7c61\chinese gang bang public balls (Kathrin).rar.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_de-de_881b257d159a5de8\french lesbian public circumcision (Sylvia,Sonja).rar.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.746_none_ab42fb092bda9182\tyrkish xxx masturbation boobs Ôï .rar.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_ee7ea14f7d8a3ee3\black cum several models legs .avi.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\lingerie horse licking .avi.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor\asian cumshot public .mpeg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_de-de_7860bee9439c3ae7\norwegian cum hidden vagina young (Sarah).avi.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..ore-shareexperience_31bf3856ad364e35_10.0.19041.1_none_f42978969c79336a\swedish bukkake girls (Jenna).mpg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-mccs-engineshared_31bf3856ad364e35_10.0.19041.1_none_abfc9db6c377b91f\indian sperm catfight glans balls .mpeg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\Downloads\cumshot sleeping gorgeoushorny .rar.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\inclusiveOobe\view\templates\cum big ejaculation .mpg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_en-us_310bfb76047869ad\canadian handjob sleeping cock stockings (Janette,Christine).mpeg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost_31bf3856ad364e35_10.0.19041.1202_none_621728fcd3c9d5f6\chinese horse sleeping cock gorgeoushorny (Sonja,Samantha).avi.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.844_none_67b5915b5651dd8a\horse masturbation ash (Sarah,Janette).mpg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor.Resources\spanish kicking lesbian hidden glans granny .zip.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Templates\gay nude lesbian high heels (Liz,Sonja).mpg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\bukkake sleeping stockings (Gina).mpeg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.84_none_81616275259e37fe\british lingerie nude uncut .mpg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-service-shared_31bf3856ad364e35_10.0.19041.1_none_3cfd44d351b1a8ab\french action several models mistress (Curtney,Janette).avi.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.1_none_9aa486d790131d4e\african cum sperm voyeur feet mistress .rar.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-h..public-utils-shared_31bf3856ad364e35_10.0.19041.1202_none_d8a1416ab7cccdcf\british xxx action [free] .zip.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\mssrv.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Templates\russian hardcore [bangbus] titts .zip.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.867_en-us_49453482f1fb5356\cum bukkake [bangbus] vagina .avi.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor.Resources\japanese horse xxx big .mpg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_en-us_215194e2327a46ac\british gay gang bang lesbian sm (Tatjana).mpeg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.1_none_2fe79eae2833b9b1\beastiality big .mpg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-a..gement-uevtemplates_31bf3856ad364e35_10.0.19041.1_none_0d66b54875835a49\chinese fucking lingerie uncut wifey .mpg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.844_none_57eddd48e7a74274\swedish animal fetish hot (!) penetration .mpg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.746_none_2212358fc33cc10f\african fucking action catfight ejaculation .zip.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..s-ime-eashared-ihds_31bf3856ad364e35_10.0.19041.1_none_e8996b7d3512363f\nude horse public ejaculation .mpeg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\assembly\tmp\bukkake lesbian .mpg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_it-it_bdb6c49fcea35732\lingerie porn public young .mpg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5fdc43acc1be690d\gay full movie pregnant .mpg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_c3d467c525734eb3\beastiality porn full movie feet (Curtney,Gina).mpg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ces-ime-eashared-lm_31bf3856ad364e35_10.0.19041.1_none_3d0229d17c310f10\horse girls feet .zip.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_10.0.19041.1_none_f07d4fae3e8e883f\japanese bukkake blowjob lesbian wifey (Britney).mpeg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.867_none_c29826784f9429f8\fetish bukkake uncut mature .mpeg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_en-us_bfae5918c0443f83\sperm sperm hidden Ôï .rar.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\chinese cum fucking sleeping upskirt (Sarah).mpeg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\Downloads\sperm [free] young .mpeg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.ShellCommon.SharedResources\fucking [milf] castration .mpg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-manager-shared_31bf3856ad364e35_10.0.19041.153_none_e23c926e32d07dc1\italian blowjob hardcore hot (!) gorgeoushorny (Anniston,Anniston).mpg.exe cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3612 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 3612 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 2716 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 2716 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 3612 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 3612 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 1960 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 1960 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 980 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 980 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 3612 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 3612 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 2716 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 2716 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 1948 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 1948 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 1960 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 1960 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 1788 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 1788 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 3988 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 3988 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 3612 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 3612 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 2716 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 2716 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 3548 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 980 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 3548 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 980 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 3492 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 3492 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 3464 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 3464 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 1960 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 1960 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 4264 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 4264 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 1948 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 1948 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 5076 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 5076 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 3612 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 3612 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 2716 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 2716 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 4928 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 4928 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 1656 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 1656 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 1788 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 1788 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 980 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 980 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 736 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 736 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 5052 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 5052 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 3988 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 3988 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 3548 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 3548 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 1180 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 1180 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 3612 wrote to memory of 2716 3612 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 86 PID 3612 wrote to memory of 2716 3612 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 86 PID 3612 wrote to memory of 2716 3612 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 86 PID 3612 wrote to memory of 1960 3612 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 88 PID 3612 wrote to memory of 1960 3612 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 88 PID 3612 wrote to memory of 1960 3612 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 88 PID 2716 wrote to memory of 980 2716 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 89 PID 2716 wrote to memory of 980 2716 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 89 PID 2716 wrote to memory of 980 2716 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 89 PID 1960 wrote to memory of 1948 1960 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 90 PID 1960 wrote to memory of 1948 1960 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 90 PID 1960 wrote to memory of 1948 1960 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 90 PID 3612 wrote to memory of 1788 3612 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 91 PID 3612 wrote to memory of 1788 3612 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 91 PID 3612 wrote to memory of 1788 3612 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 91 PID 2716 wrote to memory of 3988 2716 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 92 PID 2716 wrote to memory of 3988 2716 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 92 PID 2716 wrote to memory of 3988 2716 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 92 PID 980 wrote to memory of 3548 980 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 93 PID 980 wrote to memory of 3548 980 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 93 PID 980 wrote to memory of 3548 980 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 93 PID 1960 wrote to memory of 3492 1960 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 94 PID 1960 wrote to memory of 3492 1960 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 94 PID 1960 wrote to memory of 3492 1960 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 94 PID 1948 wrote to memory of 3464 1948 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 95 PID 1948 wrote to memory of 3464 1948 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 95 PID 1948 wrote to memory of 3464 1948 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 95 PID 3612 wrote to memory of 4264 3612 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 96 PID 3612 wrote to memory of 4264 3612 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 96 PID 3612 wrote to memory of 4264 3612 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 96 PID 2716 wrote to memory of 5076 2716 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 97 PID 2716 wrote to memory of 5076 2716 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 97 PID 2716 wrote to memory of 5076 2716 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 97 PID 980 wrote to memory of 4928 980 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 98 PID 980 wrote to memory of 4928 980 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 98 PID 980 wrote to memory of 4928 980 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 98 PID 1788 wrote to memory of 1656 1788 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 99 PID 1788 wrote to memory of 1656 1788 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 99 PID 1788 wrote to memory of 1656 1788 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 99 PID 3988 wrote to memory of 736 3988 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 100 PID 3988 wrote to memory of 736 3988 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 100 PID 3988 wrote to memory of 736 3988 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 100 PID 3548 wrote to memory of 5052 3548 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 101 PID 3548 wrote to memory of 5052 3548 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 101 PID 3548 wrote to memory of 5052 3548 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 101 PID 1960 wrote to memory of 224 1960 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 102 PID 1960 wrote to memory of 224 1960 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 102 PID 1960 wrote to memory of 224 1960 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 102 PID 1948 wrote to memory of 1180 1948 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 103 PID 1948 wrote to memory of 1180 1948 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 103 PID 1948 wrote to memory of 1180 1948 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 103 PID 3612 wrote to memory of 868 3612 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 104 PID 3612 wrote to memory of 868 3612 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 104 PID 3612 wrote to memory of 868 3612 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 104 PID 2716 wrote to memory of 2076 2716 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 105 PID 2716 wrote to memory of 2076 2716 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 105 PID 2716 wrote to memory of 2076 2716 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 105 PID 3492 wrote to memory of 4080 3492 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 106 PID 3492 wrote to memory of 4080 3492 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 106 PID 3492 wrote to memory of 4080 3492 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 106 PID 1788 wrote to memory of 312 1788 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 107 PID 1788 wrote to memory of 312 1788 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 107 PID 1788 wrote to memory of 312 1788 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 107 PID 980 wrote to memory of 2704 980 cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe 108
Processes
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"1⤵
- Checks computer location settings
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3612 -
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2716 -
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:980 -
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3548 -
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:5052 -
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:2100
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"7⤵PID:5540
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"8⤵PID:8888
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"8⤵PID:12304
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"8⤵PID:15040
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"7⤵PID:7076
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"8⤵PID:13616
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"8⤵PID:15116
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"7⤵PID:9492
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"7⤵PID:12480
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"7⤵PID:15124
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:1784
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"7⤵PID:8160
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"8⤵PID:6068
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"7⤵PID:11240
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"7⤵PID:15032
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:6444
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"7⤵PID:12404
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"7⤵PID:15236
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:8604
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:1228
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:15276
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:3332
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:5768
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"7⤵PID:9868
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"7⤵PID:3452
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:7252
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"7⤵PID:1804
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"7⤵PID:17360
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:10136
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:14844
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:3768
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:7776
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"7⤵PID:6904
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"7⤵PID:17344
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:10884
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:4508
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:6540
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:13380
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:15132
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:8680
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:4776
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:15048
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4928 -
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:2864
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:5896
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"7⤵PID:9840
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"7⤵PID:4268
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:7268
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"7⤵PID:16696
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:10108
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:3656
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:3876
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:7244
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"7⤵PID:2512
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"7⤵PID:17352
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:10300
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:1568
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:6292
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:12176
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:15284
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:8524
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:11852
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:5560
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:2704
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:5936
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:11028
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:1724
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:7360
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:15016
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:10484
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:15080
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:1692
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:7292
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:14860
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:10544
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:5088
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:6548
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:12444
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:15220
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:9060
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:12436
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:15228
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3988 -
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:736 -
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:3496
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:5996
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"7⤵PID:10500
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"7⤵PID:9108
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:7720
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"7⤵PID:8256
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:10852
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:2524
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:3536
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:5724
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"7⤵PID:11928
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"7⤵PID:6568
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:8500
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:11836
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:15020
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:6244
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:12416
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:15252
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:8448
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:11860
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:9436
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:2700
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:5808
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:9852
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:15008
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:7300
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:8480
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:10292
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:14852
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:1652
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:8276
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:16688
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:11500
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:5532
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:6064
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:12312
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:15260
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:8440
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:11804
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:2372
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:5076 -
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:4736
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:5740
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:10040
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:2480
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:7220
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:6032
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:9984
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:15340
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:760
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:8552
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:11896
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:4600
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:6160
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:12296
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:15268
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:8540
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:11904
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:14992
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"3⤵PID:2076
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:5788
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:10744
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:15072
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:7236
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:1720
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:10032
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:13668
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"3⤵PID:4412
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:8176
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:5080
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:4164
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:2324
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:3008
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"3⤵PID:6768
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:12972
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:15180
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"3⤵PID:9188
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"3⤵PID:12900
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:16848
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"3⤵PID:15196
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1960 -
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1948 -
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:3464 -
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:4368
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:5732
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"7⤵PID:10448
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"7⤵PID:8816
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:7276
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"7⤵PID:14896
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:10144
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:3356
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:1420
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:7036
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"7⤵PID:5108
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:9476
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:12624
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:15148
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:3616
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:11372
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:10336
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:8152
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:16680
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:11260
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:4260
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:1180 -
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:5704
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:9800
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:2268
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:6500
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:1192
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:9784
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:14908
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:920
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:7848
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:6028
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:10876
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:9328
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:6556
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:12980
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:16856
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:15172
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:8776
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:12208
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:15056
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3492 -
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:4080
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:5888
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:10456
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:8104
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:7260
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:1412
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:2680
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:10052
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:14836
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:1016
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:8128
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:16712
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:11092
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:15064
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:6152
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:12724
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:15212
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:8508
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:11844
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:1896
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"3⤵PID:224
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:5712
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:9712
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:13636
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:15092
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:7228
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:16704
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:17224
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:9860
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:1160
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"3⤵PID:2900
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:8284
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:11532
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:14988
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"3⤵PID:6264
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:12424
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:15244
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"3⤵PID:8348
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"3⤵PID:11624
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"3⤵PID:7716
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1788 -
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:1656 -
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:2496
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:5568
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:9824
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:15328
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:2860
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:1548
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:9676
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:13432
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:15100
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:4628
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:4732
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:11880
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:1728
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:8140
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"6⤵PID:6868
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:10248
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:4756
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:5912
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:11912
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:3504
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:8336
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:11688
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:1596
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"3⤵PID:312
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:5656
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:9484
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:12632
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:15156
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:7156
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:4356
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:9508
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:12884
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:15140
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"3⤵PID:2136
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:7968
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:7032
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:10900
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:14876
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"3⤵PID:6008
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:12048
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:15300
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"3⤵PID:8516
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"3⤵PID:11888
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"3⤵PID:14884
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4264 -
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"3⤵PID:548
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:5928
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:10416
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:3036
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:7324
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:9228
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:10684
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:3156
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"3⤵PID:436
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:5220
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:11920
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:5300
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:8168
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:15728
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:1452
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:9444
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"3⤵PID:6276
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:12768
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"5⤵PID:17948
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:15204
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"3⤵PID:8568
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"3⤵PID:12168
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"3⤵PID:15320
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"2⤵PID:868
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"3⤵PID:5636
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:9832
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:5100
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"3⤵PID:7140
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:13624
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:15108
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"3⤵PID:9396
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"3⤵PID:13268
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"3⤵PID:15164
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"2⤵PID:1272
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"3⤵PID:7756
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"4⤵PID:16840
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"3⤵PID:11016
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"3⤵PID:9312
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"2⤵PID:6256
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"3⤵PID:12948
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"3⤵PID:15188
-
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"2⤵PID:8672
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"2⤵PID:12040
-
-
C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\cd60f86cd11590e346faf03536daeb40_NeikiAnalytics.exe"2⤵PID:15292
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\beast uncut .mpeg.exe
Filesize348KB
MD56fa99bed0dddbe9ae1dab193375ff4f7
SHA1b463f19c16e7c7e5656b82dd6e667d43dfdbedb4
SHA2566e0575eed7a6f112c745a5293fc064a2597186d489a431d2ea1df88730d7a8b0
SHA5122b2d0bb2d36c8b1b360a39be0f666b7410d68b353572ff984b7ae9cbafed507cc2f4f35c3f38fb787771d0b23eae975426bb64e51875a6194c1481516218a711