Analysis
-
max time kernel
15s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
15-05-2024 12:37
Static task
static1
Behavioral task
behavioral1
Sample
d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe
-
Size
1.0MB
-
MD5
d2514759674fdca511bb67b719befab0
-
SHA1
48fa3ce4867712251fc3f5cabfab56764ec8cfe7
-
SHA256
35a3cf730294b43efb5dea3e28d2c9e99c34975c54908e59d0c8c4f093a8e20d
-
SHA512
05352f9a339eaa2baaab335b0631e90ee61fd3290ff0e919a0b1a00de1a0edd0cb0e0191d82c8910c61162b36f78d65751d94528114ef475809f832cc90f731c
-
SSDEEP
24576:lq8x6Z82COEU35VFNJi6eIP6709cpsfC4gZJgZ4SNYaL+BYYgjJa+SXZx:ToFN67BmZgBSTezgVyv
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 16 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\E: d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File opened (read-only) \??\I: d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File opened (read-only) \??\K: d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File opened (read-only) \??\R: d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File opened (read-only) \??\Y: d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File opened (read-only) \??\Z: d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File opened (read-only) \??\B: d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File opened (read-only) \??\L: d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File opened (read-only) \??\N: d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File opened (read-only) \??\O: d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File opened (read-only) \??\P: d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File opened (read-only) \??\A: d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File opened (read-only) \??\H: d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File opened (read-only) \??\Q: d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File opened (read-only) \??\U: d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File opened (read-only) \??\V: d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File opened (read-only) \??\W: d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File opened (read-only) \??\X: d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File opened (read-only) \??\G: d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File opened (read-only) \??\J: d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File opened (read-only) \??\M: d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File opened (read-only) \??\S: d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File opened (read-only) \??\T: d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe -
Drops file in System32 directory 12 IoCs
description ioc Process File created C:\Windows\SysWOW64\FxsTmp\canadian action lesbian (Liz,Britney).mpg.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\black handjob sleeping lady .avi.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\brasilian xxx uncut .zip.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\asian fetish [milf] (Sonja,Jenna).mpeg.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\kicking girls .mpg.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\System32\DriverStore\Temp\asian lesbian gang bang several models leather (Janette,Melissa).rar.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\System32\LogFiles\Fax\Incoming\italian trambling lesbian hole (Sonja).avi.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\cumshot beast masturbation gorgeoushorny (Christine).mpg.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\gang bang action hot (!) balls .avi.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\sperm cumshot [milf] stockings .rar.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\tyrkish beast girls blondie (Britney).mpg.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\asian kicking cum lesbian 40+ .avi.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe -
Drops file in Program Files directory 18 IoCs
description ioc Process File created C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\Download\brasilian gang bang catfight vagina .zip.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Program Files\Common Files\microsoft shared\gay lingerie [bangbus] .rar.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft SQL Server\130\Shared\horse action several models (Kathrin).rar.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\Microsoft Shared\animal beastiality [bangbus] boobs .rar.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\handjob beastiality public .mpeg.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Temp\chinese horse [bangbus] .avi.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Program Files\dotnet\shared\fucking gang bang licking castration .mpeg.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\kicking porn voyeur vagina latex (Gina).rar.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft SQL Server\130\Shared\canadian animal cumshot hidden blondie (Jenna,Sylvia).zip.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\russian cumshot [free] .mpeg.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\PrintAndShare\handjob sleeping lady (Anniston,Janette).mpeg.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\cumshot big titts lady (Jade).avi.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Update\Download\fucking trambling masturbation balls .mpeg.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\Temp\canadian bukkake cum [free] .mpg.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\xxx uncut leather .zip.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\Templates\swedish lesbian trambling [free] shower .mpg.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\fetish hidden cock .mpeg.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\Updates\Download\black kicking blowjob big glans mature (Sarah,Sonja).zip.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\assembly\tmp\asian cum lesbian lesbian glans .avi.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\PLA\Templates\british animal fetish girls .avi.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.844_none_57eddd48e7a74274\nude licking feet .avi.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..se-shared-datafiles_31bf3856ad364e35_10.0.19041.1_none_2f5f00d280dce9f6\african sperm full movie .avi.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-service-shared_31bf3856ad364e35_10.0.19041.1_none_3cfd44d351b1a8ab\cum gay [free] vagina leather .rar.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-mccs-engineshared_31bf3856ad364e35_10.0.19041.746_none_d404daff82e97769\tyrkish kicking action several models .zip.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_uk-ua_5b152a8d329397ec\fetish hardcore [bangbus] .avi.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.1_none_5d54c0aac5c3c12c\asian beast public cock Ôï .mpg.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-h..public-utils-shared_31bf3856ad364e35_10.0.19041.1_none_19d22204a1f3fcaf\horse lingerie voyeur .avi.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-manager-shared_31bf3856ad364e35_10.0.19041.1266_none_7916f7558927ae23\sperm public ash .rar.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\chinese trambling several models hole (Janette,Liz).rar.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\security\templates\british hardcore full movie hotel .rar.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..s-ime-eashared-ihds_31bf3856ad364e35_10.0.19041.1_none_e8996b7d3512363f\norwegian lesbian uncut fishy .avi.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_en-us_bfae5918c0443f83\horse [bangbus] nipples 50+ .rar.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-service-shared_31bf3856ad364e35_10.0.19041.1151_none_fbdc4c5f677dc2ec\horse lingerie several models 40+ (Kathrin).avi.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_10.0.19041.906_none_ef0e010d1381269b\russian cumshot xxx masturbation vagina (Curtney).avi.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-ime-eashared-ccshared_31bf3856ad364e35_10.0.19041.1_none_8c0b126c198fcf70\animal nude [bangbus] bedroom .mpg.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\fucking cum girls 50+ (Sandy,Christine).zip.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\handjob girls .mpg.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\action hot (!) titts (Curtney).avi.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_en-us_215194e2327a46ac\german fetish [bangbus] Ôï .rar.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_it-it_adfc5e0bfca53431\asian gang bang trambling hot (!) cock upskirt .mpg.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.746_none_ab42fb092bda9182\danish action lesbian ash (Sandy).avi.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_de-de_16bd831fd16633be\fucking bukkake girls hole .mpeg.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_ee7ea14f7d8a3ee3\british beast voyeur .mpeg.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_es-es_211cf1c632a13851\cum xxx voyeur glans redhair .mpg.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_es-es_30d7585a049f5b52\tyrkish cum catfight cock .mpg.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5fdc43acc1be690d\xxx lesbian big .mpeg.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-ime-eashared-proxy_31bf3856ad364e35_10.0.19041.1_none_4c786ae2f508e6d5\spanish cum [milf] legs hairy .avi.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ces-ime-eashared-lm_31bf3856ad364e35_10.0.19041.1_none_3d0229d17c310f10\gang bang gay girls .rar.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_10.0.19041.572_none_cf90e12518baac85\fucking handjob hot (!) .rar.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_10.0.19041.1_none_c6da8048542fddc7\malaysia lesbian [free] glans fishy (Christine).mpg.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\InputMethod\SHARED\british xxx lesbian boobs castration (Liz,Sylvia).rar.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor.Resources\hardcore uncut .avi.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_en-us_310bfb76047869ad\gay handjob masturbation boobs hairy .avi.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.746_none_1bbb9ab9fc52bac9\action uncut black hairunshaved .mpeg.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.1_none_a80cea873b2a6772\handjob lesbian boobs gorgeoushorny .zip.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_it-it_4c5922428a6f2d08\japanese cumshot full movie .avi.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.746_none_2212358fc33cc10f\beast cum hidden wifey .avi.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.ShellCommon.SharedResources\kicking sleeping (Sarah,Anniston).mpeg.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.746_none_d01527cffa9c25bc\italian horse [free] ejaculation (Karin).mpg.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.1_none_fa09f84703cb02c5\swedish beastiality hot (!) vagina gorgeoushorny (Tatjana,Jade).zip.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_62312bfbb33d478a\handjob [free] ash .zip.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..ore-shareexperience_31bf3856ad364e35_10.0.19041.1_none_f42978969c79336a\russian blowjob public .avi.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..ore-shareexperience_31bf3856ad364e35_10.0.19041.964_none_1c1a193f5bfcf136\norwegian xxx hot (!) .zip.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor.Resources\fetish lesbian lady (Kathrin).mpeg.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_de-de_7860bee9439c3ae7\russian action blowjob lesbian boobs gorgeoushorny .mpg.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_c3d467c525734eb3\beast action big hole bedroom .mpeg.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost_31bf3856ad364e35_10.0.19041.264_none_cb389cf57d74d691\japanese cumshot sleeping (Britney,Samantha).mpeg.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.844_none_855aff45853749ef\danish porn kicking hidden .rar.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.1_none_f3b35d713ce0fc7f\swedish beastiality handjob [bangbus] ash pregnant (Melissa).mpeg.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.1_none_2fe79eae2833b9b1\danish gang bang voyeur gorgeoushorny .rar.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\CbsTemp\american gay gay [bangbus] boobs (Curtney,Anniston).avi.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\SharedFileCache\handjob girls ash .mpeg.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\inclusiveOobe\view\templates\kicking action [milf] sm .zip.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-mccs-engineshared_31bf3856ad364e35_10.0.19041.1_none_abfc9db6c377b91f\japanese hardcore lingerie full movie vagina stockings .zip.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\assembly\temp\cumshot catfight 40+ .rar.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_de-de_881b257d159a5de8\indian action [milf] YEâPSè& (Ashley,Anniston).mpeg.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_d38ece58f77171b4\swedish trambling cumshot hot (!) bondage .avi.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..nearshareexperience_31bf3856ad364e35_10.0.19041.1288_none_ca3007304990b2ea\indian trambling lesbian hot (!) castration .avi.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\Downloaded Program Files\norwegian xxx [milf] boobs .mpg.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Templates\trambling bukkake hidden titts mistress .rar.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\templates\lesbian public femdom (Sonja,Sylvia).rar.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.867_en-us_49453482f1fb5356\porn [milf] shoes (Melissa).mpeg.exe d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2588 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 2588 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 1080 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 1080 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 2588 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 2588 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 2756 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 5100 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 2756 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 5100 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 1080 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 1080 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 2588 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 2588 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 3676 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 3676 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 4064 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 4064 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 1080 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 1080 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 2588 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 2588 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 2324 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 2324 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 2536 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 2536 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 5100 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 5100 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 2756 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 2756 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 2972 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 2972 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 4540 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 4540 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 1080 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 1080 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 2588 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 2588 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 4480 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 4480 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 3676 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 3676 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 5100 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 5100 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 4920 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 4920 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 5020 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 5020 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 4528 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 4528 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 2756 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 2756 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 2324 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 2324 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 4064 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 4064 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 3940 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 3940 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 1608 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 1608 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 2536 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 2536 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 928 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 928 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 2588 wrote to memory of 1080 2588 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 85 PID 2588 wrote to memory of 1080 2588 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 85 PID 2588 wrote to memory of 1080 2588 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 85 PID 1080 wrote to memory of 5100 1080 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 86 PID 1080 wrote to memory of 5100 1080 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 86 PID 1080 wrote to memory of 5100 1080 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 86 PID 2588 wrote to memory of 2756 2588 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 87 PID 2588 wrote to memory of 2756 2588 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 87 PID 2588 wrote to memory of 2756 2588 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 87 PID 1080 wrote to memory of 3676 1080 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 90 PID 1080 wrote to memory of 3676 1080 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 90 PID 1080 wrote to memory of 3676 1080 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 90 PID 2588 wrote to memory of 4064 2588 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 91 PID 2588 wrote to memory of 4064 2588 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 91 PID 2588 wrote to memory of 4064 2588 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 91 PID 5100 wrote to memory of 2324 5100 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 92 PID 5100 wrote to memory of 2324 5100 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 92 PID 5100 wrote to memory of 2324 5100 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 92 PID 2756 wrote to memory of 2536 2756 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 93 PID 2756 wrote to memory of 2536 2756 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 93 PID 2756 wrote to memory of 2536 2756 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 93 PID 1080 wrote to memory of 2972 1080 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 97 PID 1080 wrote to memory of 2972 1080 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 97 PID 1080 wrote to memory of 2972 1080 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 97 PID 2588 wrote to memory of 4540 2588 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 98 PID 2588 wrote to memory of 4540 2588 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 98 PID 2588 wrote to memory of 4540 2588 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 98 PID 3676 wrote to memory of 4480 3676 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 100 PID 3676 wrote to memory of 4480 3676 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 100 PID 3676 wrote to memory of 4480 3676 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 100 PID 5100 wrote to memory of 4920 5100 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 99 PID 5100 wrote to memory of 4920 5100 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 99 PID 5100 wrote to memory of 4920 5100 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 99 PID 2756 wrote to memory of 4528 2756 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 101 PID 2756 wrote to memory of 4528 2756 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 101 PID 2756 wrote to memory of 4528 2756 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 101 PID 4064 wrote to memory of 5020 4064 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 102 PID 4064 wrote to memory of 5020 4064 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 102 PID 4064 wrote to memory of 5020 4064 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 102 PID 2324 wrote to memory of 3940 2324 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 103 PID 2324 wrote to memory of 3940 2324 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 103 PID 2324 wrote to memory of 3940 2324 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 103 PID 2536 wrote to memory of 1608 2536 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 104 PID 2536 wrote to memory of 1608 2536 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 104 PID 2536 wrote to memory of 1608 2536 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 104 PID 2588 wrote to memory of 928 2588 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 105 PID 2588 wrote to memory of 928 2588 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 105 PID 2588 wrote to memory of 928 2588 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 105 PID 1080 wrote to memory of 2260 1080 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 106 PID 1080 wrote to memory of 2260 1080 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 106 PID 1080 wrote to memory of 2260 1080 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 106 PID 5100 wrote to memory of 1088 5100 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 108 PID 5100 wrote to memory of 1088 5100 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 108 PID 5100 wrote to memory of 1088 5100 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 108 PID 3676 wrote to memory of 2180 3676 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 107 PID 3676 wrote to memory of 2180 3676 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 107 PID 3676 wrote to memory of 2180 3676 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 107 PID 2972 wrote to memory of 3260 2972 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 109 PID 2972 wrote to memory of 3260 2972 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 109 PID 2972 wrote to memory of 3260 2972 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 109 PID 2756 wrote to memory of 5000 2756 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 110 PID 2756 wrote to memory of 5000 2756 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 110 PID 2756 wrote to memory of 5000 2756 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 110 PID 2324 wrote to memory of 2516 2324 d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe 111
Processes
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"1⤵
- Checks computer location settings
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2588 -
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1080 -
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:5100 -
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2324 -
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:3940 -
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:3800
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:5920
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"8⤵PID:13688
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"8⤵PID:19448
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:6916
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"8⤵PID:13928
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"8⤵PID:17520
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:9308
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"8⤵PID:19016
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:13384
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:19060
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:1716
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:8108
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"8⤵PID:6016
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:10472
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"8⤵PID:5516
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:12068
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:17792
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:5580
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:13640
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:1872
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:6860
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:16684
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:9644
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:9080
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:13044
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:17832
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:2516
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:6104
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:13344
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:17936
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:6900
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:13564
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:6196
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:7340
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:23328
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:13424
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:18484
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:4564
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:7248
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:3608
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:10064
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:16288
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:812
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:13064
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:17816
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:6484
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:10808
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:19824
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:13292
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:18052
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:7008
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:13624
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:3548
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:9168
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:14700
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:13480
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:19784
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4920 -
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:3644
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:5704
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:12076
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:13164
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:18044
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:6964
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:5784
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:10040
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:18852
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:13116
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:2964
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:1936
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:8100
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:20032
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:10464
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:15868
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:23592
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:13036
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:17772
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:6188
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:11068
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:2196
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:13252
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:17696
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:6836
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:16296
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:7396
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:7348
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:23568
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:13448
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:19756
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:1088
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:5656
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:11400
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:17480
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:13140
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:4140
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:7032
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:15408
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:21024
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:10080
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:23336
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:13328
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:17840
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:656
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:13632
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:19300
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:7084
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:16076
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:9396
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:10072
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:19092
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:13352
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:19528
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3676 -
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4480 -
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:1208
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:5952
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:13672
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:19864
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:6920
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:16092
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:23356
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:9324
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:2792
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:13392
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:17968
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:5044
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:7124
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:16692
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:9160
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:20408
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:13528
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:19776
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:5492
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:11028
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:16112
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:9676
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:13268
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:17740
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:6876
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:14036
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:19840
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:9192
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:19216
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:13124
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:1380
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:2180
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:5896
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:11740
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:16272
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:13204
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:17528
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:6956
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:15416
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:20432
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:8236
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:3268
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:13132
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:3184
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:1048
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:9668
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:20008
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:13368
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:18424
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:6660
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:16104
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:23600
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:8084
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:5768
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:9860
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:4492
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:13052
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:17824
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2972 -
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:3260
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:6064
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:12092
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:13156
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:17704
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:6892
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:5196
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:10500
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:19832
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:13308
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:17800
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:3752
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:10836
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:17428
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:13300
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:17748
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:6420
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:10484
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:6352
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:12248
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:17764
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:6804
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:15860
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:23844
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:9316
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:20024
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:13400
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:19536
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"3⤵PID:2260
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:5912
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:10880
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:6340
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:13284
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:17756
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:6940
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:13600
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:1676
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:8904
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:19856
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:13472
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:18640
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"3⤵PID:1588
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:8872
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:19800
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:13588
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:16968
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"3⤵PID:6780
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:5736
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"3⤵PID:9008
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:17420
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"3⤵PID:13552
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"3⤵PID:16036
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2756 -
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2536 -
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:1608 -
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:760
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:5816
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:11408
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"8⤵PID:15852
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"8⤵PID:7532
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:13148
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:17676
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:7040
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:5240
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:10048
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:18496
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:13336
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:6256
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:1564
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:6384
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:11684
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"8⤵PID:15900
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"8⤵PID:23584
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:13092
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:2968
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:6788
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:15908
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:20812
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:9144
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:14800
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:13520
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:19552
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:5360
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:13360
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:18076
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:6868
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:16068
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:22892
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:9184
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:20016
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:13456
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:19200
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:500
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:5960
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:13648
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:5036
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:6908
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:15520
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:20416
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:9208
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:1728
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:13496
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:19816
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:2100
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:7324
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:14696
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:11356
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:22832
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:13228
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:14508
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:6200
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:13608
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:19560
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:6844
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:15512
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:19880
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:7752
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:1944
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:13376
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:17928
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4528 -
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:736
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:5700
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:12084
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:13172
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:17484
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:7024
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:15916
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:21656
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:9636
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:18836
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:13056
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:19312
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:3316
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:6312
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:11044
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:18276
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:13260
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:17720
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:6812
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:16084
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:24368
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:8172
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:19992
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:13464
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:18284
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:5428
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:11944
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:13188
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:18036
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:6884
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:15528
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:23576
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:9124
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:4472
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:13544
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:19280
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"3⤵PID:5000
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:5548
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:10944
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:18844
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:13276
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:17732
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:7000
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:15020
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:19872
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:9176
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:19808
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:13512
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:19288
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"3⤵PID:2360
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:7576
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:19084
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:9372
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:19792
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:13100
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:4160
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"3⤵PID:6572
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:14028
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:19296
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"3⤵PID:6796
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:15844
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:20424
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"3⤵PID:9200
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:23620
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"3⤵PID:13488
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"3⤵PID:18292
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4064 -
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:5020 -
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:3324
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:5716
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:11392
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"7⤵PID:1092
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:13220
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:2160
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:6972
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:13616
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:17652
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:6776
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:2168
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:13408
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:18060
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:3724
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:7568
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:5272
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:10056
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:18028
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:13108
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:2184
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:5588
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:11512
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:15884
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"6⤵PID:22808
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:13212
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:18120
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:6852
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:15836
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:22600
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:9152
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:2492
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:13440
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:6548
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"3⤵PID:1616
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:5800
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:13664
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:17412
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:7016
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:16280
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:9348
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:10088
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:19192
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:13072
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:17808
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"3⤵PID:1116
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:7048
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:19848
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:11328
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:16956
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:13236
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:19208
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"3⤵PID:6252
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:12016
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:13180
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:17512
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"3⤵PID:6828
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:16060
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:6748
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"3⤵PID:9088
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:22840
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"3⤵PID:13416
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"3⤵PID:17948
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4540 -
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"3⤵PID:4456
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:5808
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:13680
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:19320
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:6932
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:15892
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:22824
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:8228
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:2020
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:13432
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:18084
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"3⤵PID:1976
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:8092
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:19100
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:10968
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"5⤵PID:17436
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:13244
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:17544
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"3⤵PID:6228
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:13656
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:19068
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"3⤵PID:6820
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:15876
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:22816
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"3⤵PID:9400
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:19076
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"3⤵PID:13084
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"3⤵PID:3188
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
PID:928 -
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"3⤵PID:5904
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:13320
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:18068
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"3⤵PID:6948
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:13580
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:216
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"3⤵PID:9084
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"4⤵PID:19984
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"3⤵PID:13504
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"3⤵PID:19544
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"2⤵PID:3908
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"3⤵PID:11924
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"3⤵PID:13196
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"3⤵PID:17536
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"2⤵PID:6980
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"3⤵PID:13572
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"3⤵PID:17712
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"2⤵PID:9132
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"3⤵PID:20000
-
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"2⤵PID:13536
-
-
C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d2514759674fdca511bb67b719befab0_NeikiAnalytics.exe"2⤵PID:17392
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\kicking porn voyeur vagina latex (Gina).rar.exe
Filesize845KB
MD5d0d31545261982566d7613b1d64d4798
SHA1864597c3d6961c2ce9409247306f18c3bdd6dfd2
SHA2565e1a174c99f8d967a2661588e3094462da07eb55a696ccc875f0da7ce2b23034
SHA5120ddc620b1499dbd671b5f3cdae7861d41bbc57c0d0e9a4ce7e6ead8c0ac9a633c45aa852749733a5699042cfdcc69e46392e285a27e63342d67b47d1097f0d72