Analysis
-
max time kernel
13s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
15/05/2024, 11:08
Behavioral task
behavioral1
Sample
ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe
-
Size
1.6MB
-
MD5
ce0a774d4c9e0a086470ee0a395f7f90
-
SHA1
d073ca923e4cb29ea2e22b82877935ac24ba8e01
-
SHA256
d3ccdb9eea9b53bf3f6c79382b7a16fbb4021a5a141a14c45f62a4e1120d5713
-
SHA512
e2a5d6438a72636d39124e8bb98554ed9e49900519b5bdd8fc258bd0128480812c6ba881405d8cad68a10fed440cbed0c7341f4fa1c274635bd89e65f671da3c
-
SSDEEP
49152:NryCyBAI2C9HLseMtCVhPOk15ehRy3EkgVql:NryRrJMO4kMRy3wVw
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 16 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-4018855536-2201274732-320770143-1000\Control Panel\International\Geo\Nation ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4018855536-2201274732-320770143-1000\Control Panel\International\Geo\Nation ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4018855536-2201274732-320770143-1000\Control Panel\International\Geo\Nation ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4018855536-2201274732-320770143-1000\Control Panel\International\Geo\Nation ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4018855536-2201274732-320770143-1000\Control Panel\International\Geo\Nation ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4018855536-2201274732-320770143-1000\Control Panel\International\Geo\Nation ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4018855536-2201274732-320770143-1000\Control Panel\International\Geo\Nation ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4018855536-2201274732-320770143-1000\Control Panel\International\Geo\Nation ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4018855536-2201274732-320770143-1000\Control Panel\International\Geo\Nation ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4018855536-2201274732-320770143-1000\Control Panel\International\Geo\Nation ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4018855536-2201274732-320770143-1000\Control Panel\International\Geo\Nation ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4018855536-2201274732-320770143-1000\Control Panel\International\Geo\Nation ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4018855536-2201274732-320770143-1000\Control Panel\International\Geo\Nation ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4018855536-2201274732-320770143-1000\Control Panel\International\Geo\Nation ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4018855536-2201274732-320770143-1000\Control Panel\International\Geo\Nation ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4018855536-2201274732-320770143-1000\Control Panel\International\Geo\Nation ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
resource yara_rule behavioral2/memory/3372-0-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/files/0x00030000000229e1-5.dat upx behavioral2/memory/4872-14-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1640-155-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3032-156-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3704-183-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/784-184-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2988-186-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3480-185-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/936-187-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4880-189-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4608-188-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1792-192-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2844-191-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3372-190-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5040-194-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4872-193-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1640-195-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3032-197-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3704-198-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4376-202-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3860-200-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2764-199-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/784-201-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2988-204-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3480-203-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3984-206-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4880-209-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4200-212-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3384-211-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3720-210-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4608-208-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4492-207-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/936-205-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1792-214-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/548-213-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5164-215-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5224-216-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3964-217-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5276-218-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3860-223-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2764-222-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5404-225-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4376-224-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5428-226-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5436-228-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4492-227-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5444-232-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4756-233-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4200-231-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3384-230-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3720-229-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/6136-234-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5224-235-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/6176-250-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/6344-251-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/6160-249-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/6152-248-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5948-247-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5516-246-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/6196-245-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5524-238-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/6168-242-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5412-241-0x0000000000400000-0x000000000041E000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\J: ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File opened (read-only) \??\Q: ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File opened (read-only) \??\R: ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File opened (read-only) \??\X: ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File opened (read-only) \??\G: ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File opened (read-only) \??\H: ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File opened (read-only) \??\K: ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File opened (read-only) \??\M: ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File opened (read-only) \??\N: ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File opened (read-only) \??\O: ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File opened (read-only) \??\Y: ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File opened (read-only) \??\V: ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File opened (read-only) \??\A: ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File opened (read-only) \??\B: ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File opened (read-only) \??\I: ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File opened (read-only) \??\L: ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File opened (read-only) \??\P: ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File opened (read-only) \??\S: ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File opened (read-only) \??\T: ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File opened (read-only) \??\E: ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File opened (read-only) \??\U: ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File opened (read-only) \??\W: ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File opened (read-only) \??\Z: ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe -
Drops file in System32 directory 12 IoCs
description ioc Process File created C:\Windows\SysWOW64\config\systemprofile\italian handjob beast lesbian cock swallow .mpeg.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\System32\DriverStore\Temp\danish animal gay [free] glans .avi.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\russian animal trambling [free] circumcision .mpeg.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\italian cumshot beast sleeping glans sm .mpeg.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\tyrkish cum lesbian public leather .avi.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\sperm public balls .avi.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\fucking [milf] sweet .mpeg.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\System32\LogFiles\Fax\Incoming\fucking several models .rar.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\black action sperm public swallow .mpg.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\lingerie [bangbus] shower (Christine,Sylvia).zip.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\tyrkish cumshot beast licking hole (Kathrin,Janette).mpg.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\bukkake hidden shower (Kathrin,Janette).mpeg.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe -
Drops file in Program Files directory 18 IoCs
description ioc Process File created C:\Program Files\Microsoft Office\Updates\Download\blowjob [milf] leather (Christine,Sarah).avi.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\malaysia beast masturbation (Melissa).mpeg.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Temp\indian beastiality xxx full movie YEâPSè& .avi.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\Templates\indian beastiality fucking sleeping (Curtney).zip.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft SQL Server\130\Shared\japanese animal fucking [free] young .mpeg.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\blowjob lesbian cock (Jenna,Janette).rar.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft SQL Server\130\Shared\japanese action sperm catfight .rar.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\PrintAndShare\swedish nude hardcore several models glans castration (Sylvia).zip.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Update\Download\danish animal lingerie voyeur glans upskirt (Sarah).mpg.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\russian nude hardcore voyeur .rar.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Program Files\Common Files\microsoft shared\tyrkish handjob fucking masturbation feet redhair (Jade).rar.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\american handjob fucking several models (Jade).mpg.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\Download\russian horse beast licking hole shower (Curtney).mpg.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\Temp\danish animal beast licking glans .mpg.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\trambling [milf] ,Ó .mpeg.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\Microsoft Shared\sperm catfight cock shower .mpg.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Program Files\dotnet\shared\gay voyeur shower .avi.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\brasilian animal hardcore girls .mpeg.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\security\templates\sperm hidden cock hairy .zip.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5021dd18efc0460c\black fetish xxx masturbation (Jade).mpg.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-ime-eashared-proxy_31bf3856ad364e35_10.0.19041.1_none_4c786ae2f508e6d5\chinese horse hot (!) (Janette).avi.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.746_none_ab42fb092bda9182\russian nude hardcore licking upskirt .zip.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.1_none_fa09f84703cb02c5\cumshot bukkake [free] (Samantha).rar.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\swedish porn hardcore catfight titts bedroom .zip.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.1_none_833abdc06c68d338\french lingerie [bangbus] young .mpg.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..ore-shareexperience_31bf3856ad364e35_10.0.19041.964_none_1c1a193f5bfcf136\tyrkish gang bang trambling several models glans (Anniston,Liz).mpeg.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_10.0.19041.1_it-it_72a319bf8ee74a9b\british horse big wifey .rar.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5fdc43acc1be690d\cumshot trambling uncut bondage .mpg.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.789_en-us_58ebf9ecc407e3c0\nude xxx big mature .mpeg.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_10.0.19041.572_none_cf90e12518baac85\italian kicking horse girls (Curtney).avi.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-h..public-utils-shared_31bf3856ad364e35_10.0.19041.1_none_19d22204a1f3fcaf\xxx full movie feet .zip.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\Downloads\russian kicking beast [milf] .zip.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.867_none_c29826784f9429f8\swedish animal bukkake hot (!) titts .mpeg.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-manager-shared_31bf3856ad364e35_10.0.19041.1266_none_7916f7558927ae23\american beastiality horse licking glans .avi.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\bukkake public granny (Anniston,Sarah).mpeg.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.84_none_81616275259e37fe\spanish lesbian hot (!) .zip.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-h..public-utils-shared_31bf3856ad364e35_10.0.19041.1202_none_d8a1416ab7cccdcf\malaysia trambling voyeur high heels .zip.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.1_none_5d54c0aac5c3c12c\japanese cumshot lesbian [free] high heels .rar.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_10.0.19041.1_none_a7ad1894592cfa12\handjob trambling masturbation feet .mpg.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_10.0.19041.1_none_c6da8048542fddc7\asian horse several models sweet .mpeg.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_10.0.19041.1_de-de_3d077a9cd5de5151\kicking gay voyeur young .mpg.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_uk-ua_5b152a8d329397ec\tyrkish kicking lesbian [free] .rar.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.844_none_67b5915b5651dd8a\action fucking full movie glans ash .avi.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-manager-shared_31bf3856ad364e35_10.0.19041.153_none_e23c926e32d07dc1\fucking girls .rar.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Templates\japanese cumshot xxx uncut cock upskirt (Curtney).mpg.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-mccs-engineshared_31bf3856ad364e35_10.0.19041.746_none_d404daff82e97769\indian fetish bukkake voyeur sm (Ashley,Janette).avi.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_10.0.19041.1_es-es_e5c3ad79c4e34ebb\asian gay catfight .avi.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..nearshareexperience_31bf3856ad364e35_10.0.19041.1288_none_ca3007304990b2ea\norwegian fucking public .avi.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_en-us_5af076e0a3cb0fa7\action hardcore hot (!) .avi.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor\russian handjob beast voyeur hole gorgeoushorny (Sarah).zip.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\SharedFileCache\fucking [free] cock fishy .avi.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.746_none_d01527cffa9c25bc\danish horse hardcore sleeping glans YEâPSè& .mpeg.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.1_none_2fe79eae2833b9b1\japanese action horse [milf] black hairunshaved .avi.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_it-it_4c5922428a6f2d08\lesbian several models 50+ .zip.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_ee7ea14f7d8a3ee3\sperm full movie feet balls .zip.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Templates\japanese action trambling licking bedroom .mpeg.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..s-ime-eashared-ihds_31bf3856ad364e35_10.0.19041.1_none_e8996b7d3512363f\african gay [free] glans gorgeoushorny .avi.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_es-es_30d7585a049f5b52\beastiality trambling hidden .mpg.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_62312bfbb33d478a\animal horse hidden granny .rar.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\lesbian [bangbus] black hairunshaved .mpg.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_de-de_7860bee9439c3ae7\swedish fetish lingerie girls traffic .mpeg.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.1_none_a80cea873b2a6772\horse big bondage .rar.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.746_none_2212358fc33cc10f\canadian horse uncut glans latex .avi.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\templates\lingerie licking .zip.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_de-de_881b257d159a5de8\american kicking fucking hot (!) shoes .rar.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_en-us_310bfb76047869ad\black porn sperm sleeping glans blondie .rar.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.844_none_57eddd48e7a74274\swedish beastiality lingerie several models (Karin).mpeg.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_it-it_e79b400a6df5fd2c\african bukkake big .mpg.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_de-de_16bd831fd16633be\blowjob [free] 50+ (Christine,Sylvia).zip.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-service-shared_31bf3856ad364e35_10.0.19041.1_none_3cfd44d351b1a8ab\action blowjob full movie bondage (Ashley,Janette).mpg.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\inclusiveOobe\view\templates\lesbian hidden (Curtney).rar.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_it-it_bdb6c49fcea35732\porn xxx catfight young (Anniston,Sylvia).mpg.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.1_none_f3b35d713ce0fc7f\fucking uncut cock bedroom .mpg.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..nearshareexperience_31bf3856ad364e35_10.0.19041.1_none_0b596e2a33be7d4c\kicking sperm [free] (Sylvia).zip.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_887b2378b7b5651d\chinese xxx girls .rar.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared_31bf3856ad364e35_10.0.19041.1_none_bd731e5b85dd203e\horse lesbian catfight hole .mpg.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_14c898cc82025c76\sperm [bangbus] titts .rar.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_10.0.19041.906_none_ef0e010d1381269b\sperm uncut glans sweet .avi.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_es-es_5abbd3c4a3f2014c\kicking beast catfight feet .zip.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor.Resources\brasilian kicking lesbian several models glans boots (Curtney).mpeg.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\PLA\Templates\american action beast hidden 40+ (Anniston,Jade).mpeg.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\tyrkish nude lingerie [free] redhair .rar.exe ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3372 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 3372 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 4872 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 4872 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 3372 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 3372 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 1640 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 1640 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 3032 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 3032 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 4872 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 4872 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 3372 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 3372 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 784 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 784 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 3704 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 3704 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 4872 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 3372 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 4872 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 3372 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 2988 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 2988 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 3480 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 3480 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 3032 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 3032 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 1640 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 1640 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 936 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 936 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 4880 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 4880 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 4608 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 4608 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 548 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 548 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 3372 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 3372 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 4872 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 784 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 784 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 4872 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 3704 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 3704 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 1792 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 1792 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 2844 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 5040 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 2844 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 5040 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 3032 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 3032 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 2988 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 2988 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 1640 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 1640 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 4260 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 4260 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 3480 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 3480 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 3964 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 3964 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 3372 wrote to memory of 4872 3372 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 87 PID 3372 wrote to memory of 4872 3372 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 87 PID 3372 wrote to memory of 4872 3372 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 87 PID 4872 wrote to memory of 1640 4872 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 92 PID 4872 wrote to memory of 1640 4872 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 92 PID 4872 wrote to memory of 1640 4872 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 92 PID 3372 wrote to memory of 3032 3372 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 93 PID 3372 wrote to memory of 3032 3372 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 93 PID 3372 wrote to memory of 3032 3372 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 93 PID 4872 wrote to memory of 3704 4872 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 96 PID 4872 wrote to memory of 3704 4872 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 96 PID 4872 wrote to memory of 3704 4872 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 96 PID 3372 wrote to memory of 784 3372 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 97 PID 3372 wrote to memory of 784 3372 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 97 PID 3372 wrote to memory of 784 3372 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 97 PID 3032 wrote to memory of 3480 3032 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 98 PID 3032 wrote to memory of 3480 3032 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 98 PID 3032 wrote to memory of 3480 3032 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 98 PID 1640 wrote to memory of 2988 1640 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 99 PID 1640 wrote to memory of 2988 1640 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 99 PID 1640 wrote to memory of 2988 1640 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 99 PID 784 wrote to memory of 936 784 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 101 PID 784 wrote to memory of 936 784 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 101 PID 784 wrote to memory of 936 784 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 101 PID 3372 wrote to memory of 4608 3372 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 102 PID 3372 wrote to memory of 4608 3372 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 102 PID 3372 wrote to memory of 4608 3372 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 102 PID 4872 wrote to memory of 4880 4872 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 103 PID 4872 wrote to memory of 4880 4872 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 103 PID 4872 wrote to memory of 4880 4872 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 103 PID 3704 wrote to memory of 548 3704 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 104 PID 3704 wrote to memory of 548 3704 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 104 PID 3704 wrote to memory of 548 3704 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 104 PID 1640 wrote to memory of 2844 1640 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 105 PID 1640 wrote to memory of 2844 1640 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 105 PID 1640 wrote to memory of 2844 1640 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 105 PID 3032 wrote to memory of 1792 3032 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 106 PID 3032 wrote to memory of 1792 3032 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 106 PID 3032 wrote to memory of 1792 3032 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 106 PID 2988 wrote to memory of 5040 2988 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 107 PID 2988 wrote to memory of 5040 2988 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 107 PID 2988 wrote to memory of 5040 2988 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 107 PID 3480 wrote to memory of 4260 3480 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 108 PID 3480 wrote to memory of 4260 3480 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 108 PID 3480 wrote to memory of 4260 3480 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 108 PID 936 wrote to memory of 3964 936 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 109 PID 936 wrote to memory of 3964 936 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 109 PID 936 wrote to memory of 3964 936 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 109 PID 4872 wrote to memory of 2764 4872 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 112 PID 4872 wrote to memory of 2764 4872 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 112 PID 4872 wrote to memory of 2764 4872 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 112 PID 784 wrote to memory of 3860 784 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 111 PID 784 wrote to memory of 3860 784 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 111 PID 784 wrote to memory of 3860 784 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 111 PID 3372 wrote to memory of 4376 3372 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 113 PID 3372 wrote to memory of 4376 3372 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 113 PID 3372 wrote to memory of 4376 3372 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 113 PID 3704 wrote to memory of 2140 3704 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 114 PID 3704 wrote to memory of 2140 3704 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 114 PID 3704 wrote to memory of 2140 3704 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 114 PID 2988 wrote to memory of 3984 2988 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 115 PID 2988 wrote to memory of 3984 2988 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 115 PID 2988 wrote to memory of 3984 2988 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 115 PID 3032 wrote to memory of 3384 3032 ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe 116
Processes
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"1⤵
- Checks computer location settings
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3372 -
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4872 -
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1640 -
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2988 -
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:5040 -
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:5224
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:6152
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"8⤵PID:9900
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"9⤵PID:21528
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"8⤵PID:14256
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"8⤵PID:18668
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:7504
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"8⤵PID:14788
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"8⤵PID:18868
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:9624
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"8⤵PID:8208
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:14544
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:19052
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:5404
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:7600
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"8⤵PID:20016
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:10744
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"8⤵PID:23148
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:14664
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:20088
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:6776
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:10628
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"8⤵PID:18392
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:14576
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:20056
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:8896
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:15976
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:21560
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:11888
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:21544
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:14240
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:20400
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:3984
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:6568
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:11332
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"8⤵PID:20236
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:14328
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:18876
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:7936
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:22344
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:10028
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:20496
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:14384
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:20080
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:5476
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:10344
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:14416
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:19712
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:7492
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:15936
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:21464
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:12240
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:20560
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:14144
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:18168
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:2844 -
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:5148
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:6120
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:8148
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"8⤵PID:15944
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"8⤵PID:20452
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:9940
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"8⤵PID:23156
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:14672
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:19744
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:6996
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:11652
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"8⤵PID:18140
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:14112
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:18088
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:8792
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:20444
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:14632
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:20064
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:5428
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:7920
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:14648
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:19752
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:10732
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:18416
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:11876
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:19032
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:6760
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:11584
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:18000
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:14312
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:18860
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:8880
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:15884
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:20384
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:11920
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:21868
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:14104
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:20220
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:3720
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:6204
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:10044
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:21520
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:14512
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:19776
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:7432
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:15992
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:21164
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:10588
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:22188
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:14656
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:20032
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:5452
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:8540
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:22636
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:10976
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:21552
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:11480
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:19200
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:6972
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:11772
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:18384
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:14184
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:18748
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:9204
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:15344
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:18264
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:12180
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:16944
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:21568
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:14192
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:18852
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3704 -
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:548 -
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:4756
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:5412
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:9816
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"8⤵PID:21600
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:14304
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:18716
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:7284
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:15920
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:21180
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:9300
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:20420
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:12584
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:22628
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:14168
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:18248
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:5436
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:8660
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:14472
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:19792
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:11500
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:19856
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:14464
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:19800
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:6752
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:9880
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:22336
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:14296
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:19264
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:8888
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:19536
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:12164
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:18408
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:14136
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:18640
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:2140
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:6136
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:8524
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:16000
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:22156
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:10796
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:20544
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:14096
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:18048
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:7128
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:15352
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:20200
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:9432
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:22212
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:2008
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:19024
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:5500
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:9564
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:22612
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:14520
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:19824
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:7392
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:14568
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:19736
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:9924
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:21592
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:14552
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:20040
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4880 -
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:4200
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:6196
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:10468
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:18400
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:14320
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:18884
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:7228
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:19864
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:9752
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:20072
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:14504
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:19808
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:5460
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:7800
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:14360
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:19596
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:10004
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:18340
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:14884
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:18684
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:6952
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:11388
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:22352
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:14448
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:19704
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:9100
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:22604
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:12188
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:18008
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:14208
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:18756
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"3⤵PID:2764
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:6128
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:1676
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:15904
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:21156
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:10848
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:22620
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:4120
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:19604
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:6988
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:11708
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:18032
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:14280
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:20528
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:8808
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:20376
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:14640
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:19760
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"3⤵PID:5516
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:10560
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:19060
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:14600
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:20536
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"3⤵PID:7216
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:14456
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:19784
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"3⤵PID:9764
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:22312
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"3⤵PID:14344
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"3⤵PID:18160
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3032 -
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3480 -
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4260 -
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:5276
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:6472
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:11716
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"8⤵PID:21336
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:14852
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:18700
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:7580
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:22556
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:9800
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:20460
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:14496
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:18268
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:5388
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:7484
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:20368
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:10636
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:20096
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:14584
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:20048
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:6784
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:10776
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:19628
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:12888
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:19332
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:8708
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:15952
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:20436
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:11700
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:18072
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:14264
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:18692
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:4492
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:6176
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:9188
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:20112
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:14432
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:20552
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:7712
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:15984
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:21456
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:9744
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:22164
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:14120
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:18724
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:5468
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:8132
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:19380
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:9908
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:22004
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:14128
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:18020
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:7152
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:11860
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:21536
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:14288
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:18764
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:8816
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:15912
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:20820
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:14560
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:19832
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:1792 -
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:5164
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:6276
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:9888
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:19364
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:14376
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:19564
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:7704
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:22180
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:10760
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:22196
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:14608
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:19720
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:5416
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:7720
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:20488
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:10768
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:19356
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:2192
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:19016
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:6768
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:12156
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:18368
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:14224
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:18660
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:8780
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:19556
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:11644
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:21996
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:14088
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:18096
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"3⤵PID:3384
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:6160
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:10336
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:22204
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:14232
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:18512
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:7420
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:14440
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:20104
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:9360
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:20504
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:12608
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:5724
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:14160
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:18232
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"3⤵PID:5484
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:10432
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:19348
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:14216
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:18708
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"3⤵PID:7572
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:18080
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"3⤵PID:10752
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:19528
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"3⤵PID:1064
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"3⤵PID:19372
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:784 -
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:936 -
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:3964 -
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:5948
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:10716
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"7⤵PID:22172
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:4676
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:19580
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:7296
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:14860
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:19936
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:9596
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:22320
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:14488
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:20392
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:5524
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:9736
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:20568
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:14400
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:20120
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:7260
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:22328
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:9236
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:20228
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:12660
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:22596
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:14152
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:19340
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"3⤵PID:3860
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:6168
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:10788
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:20356
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:14176
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:18256
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:7412
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:14392
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:21472
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:9604
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:19324
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:14368
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:19572
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"3⤵PID:5508
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:10552
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:21576
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:14408
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:18772
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"3⤵PID:7588
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:1656
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:20520
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"3⤵PID:9616
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:15960
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:21512
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"3⤵PID:14480
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"3⤵PID:19840
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4608 -
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"3⤵PID:4964
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:5304
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:10020
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"6⤵PID:21584
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:14528
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:20024
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:7400
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:14796
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:20512
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:10708
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:19620
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:3548
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:19612
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"3⤵PID:5444
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:7696
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:15968
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:21480
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:10724
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:18376
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:14624
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:19768
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"3⤵PID:6908
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:11732
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:21328
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:14272
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:18516
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"3⤵PID:8548
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:15856
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:20428
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"3⤵PID:12172
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:21320
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"3⤵PID:14200
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"3⤵PID:18676
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"2⤵PID:4376
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"3⤵PID:6344
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:10352
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"5⤵PID:22220
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:14592
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:19848
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"3⤵PID:7244
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:14804
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:19068
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"3⤵PID:10644
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:15928
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:20192
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"3⤵PID:14352
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"3⤵PID:19588
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"2⤵PID:5492
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"3⤵PID:8156
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:5076
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:21172
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"3⤵PID:10036
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"4⤵PID:18164
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"3⤵PID:14536
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"3⤵PID:19816
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"2⤵PID:7200
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"3⤵PID:14616
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"3⤵PID:19728
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"2⤵PID:8980
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"3⤵PID:19308
-
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"2⤵PID:14424
-
-
C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ce0a774d4c9e0a086470ee0a395f7f90_NeikiAnalytics.exe"2⤵PID:20184
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\american handjob fucking several models (Jade).mpg.exe
Filesize494KB
MD596d1de3731c1a2afcc5ee9d52c959409
SHA1ef76c92780355c68e77554eaff97047758eb241b
SHA256a890289e0c4955980590212eea0f9f603e9e0b9b29c884b822511f10410671fd
SHA5127bdeacc1cd1b8627cd673f975dc4c8987ea460e280ff009df76871e46000aafda6e98f82eca7a9dd5f17e5385759f8e6d4624ca7e8581f86ebc8c1f2596904ee
-
Filesize
146B
MD5675c07e1320542b2fbe0c9d87dbda1a4
SHA163cb27d7c3f747b85904aea3bb6833751193587f
SHA25611410c8bc54cee1fcda6ce6543f5fb6023c423623b85b506f61d2c1009ae6bd9
SHA5121cbcc0030b46da9aa380142021cf9d4f59ca47b7e9ba2beeb199d710ccbab60d693d00dfa02ac499d5a309f0235346fed497717685e01939dc7f1aa244cf48a6