Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
25s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
16/05/2024, 03:34
Static task
static1
Behavioral task
behavioral1
Sample
8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe
-
Size
1.5MB
-
MD5
8e30a8db8d13695782510a9dc3392ab0
-
SHA1
4009b7a927d65ac35b359a54ae93c7d60fc42003
-
SHA256
901e085db9c8b300a805daa7b42658f32a399c461c1326f6452f2d194f5a5ad5
-
SHA512
d52726ba05b035ab19431ab9f7ebc045c0458437fb812f46c5273977aece37b49548b1ddde4a59cfa93759181c4f15f1eaf5464a448b75c3b5e785cb4f45707e
-
SSDEEP
49152:VOhVxJqZ/XmEp/8bI6UEHrEM0rVnf/z6drV7D:QhVXqhWKk8+HoM0r13OdBD
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 5 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-3808065738-1666277613-1125846146-1000\Control Panel\International\Geo\Nation 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3808065738-1666277613-1125846146-1000\Control Panel\International\Geo\Nation 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3808065738-1666277613-1125846146-1000\Control Panel\International\Geo\Nation 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3808065738-1666277613-1125846146-1000\Control Panel\International\Geo\Nation 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3808065738-1666277613-1125846146-1000\Control Panel\International\Geo\Nation 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\G: 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe File opened (read-only) \??\H: 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe File opened (read-only) \??\M: 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe File opened (read-only) \??\Y: 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe File opened (read-only) \??\A: 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe File opened (read-only) \??\L: 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe File opened (read-only) \??\P: 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe File opened (read-only) \??\U: 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe File opened (read-only) \??\I: 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe File opened (read-only) \??\O: 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe File opened (read-only) \??\S: 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe File opened (read-only) \??\T: 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe File opened (read-only) \??\X: 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe File opened (read-only) \??\Z: 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe File opened (read-only) \??\E: 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe File opened (read-only) \??\J: 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe File opened (read-only) \??\K: 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe File opened (read-only) \??\N: 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe File opened (read-only) \??\Q: 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe File opened (read-only) \??\R: 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe File opened (read-only) \??\V: 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe File opened (read-only) \??\W: 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe File opened (read-only) \??\B: 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe -
Drops file in Program Files directory 11 IoCs
description ioc Process File created C:\Program Files\dotnet\shared\action trambling hidden traffic .zip.exe 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\Templates\tyrkish cumshot sperm [milf] nipples .avi.exe 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\handjob beast hot (!) (Sandy).mpg.exe 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft SQL Server\130\Shared\swedish handjob full movie titts balls .mpeg.exe 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft SQL Server\130\Shared\indian nude gay public (Curtney,Sylvia).zip.exe 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\Updates\Download\spanish blowjob licking .mpg.exe 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\black nude [bangbus] ash .mpeg.exe 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe File created C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\PrintAndShare\german beast hardcore catfight .zip.exe 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\lesbian sleeping stockings .mpg.exe 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe File created C:\Program Files\Common Files\microsoft shared\norwegian fetish catfight 50+ (Jenna).mpeg.exe 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\chinese fucking blowjob lesbian glans lady (Janette,Jade).rar.exe 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe -
Drops file in Windows directory 1 IoCs
description ioc Process File created C:\Windows\mssrv.exe 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 20 IoCs
pid Process 2104 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe 2104 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe 1856 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe 1856 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe 2104 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe 2104 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe 3880 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe 3880 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe 2104 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe 2104 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe 3440 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe 3440 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe 1856 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe 1856 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe 1728 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe 1728 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe 2104 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe 2104 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe 4780 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe 4780 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 27 IoCs
description pid Process procid_target PID 2104 wrote to memory of 1856 2104 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe 90 PID 2104 wrote to memory of 1856 2104 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe 90 PID 2104 wrote to memory of 1856 2104 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe 90 PID 2104 wrote to memory of 3880 2104 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe 91 PID 2104 wrote to memory of 3880 2104 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe 91 PID 2104 wrote to memory of 3880 2104 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe 91 PID 1856 wrote to memory of 3440 1856 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe 92 PID 1856 wrote to memory of 3440 1856 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe 92 PID 1856 wrote to memory of 3440 1856 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe 92 PID 2104 wrote to memory of 1728 2104 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe 93 PID 2104 wrote to memory of 1728 2104 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe 93 PID 2104 wrote to memory of 1728 2104 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe 93 PID 1856 wrote to memory of 4780 1856 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe 94 PID 1856 wrote to memory of 4780 1856 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe 94 PID 1856 wrote to memory of 4780 1856 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe 94 PID 3880 wrote to memory of 3612 3880 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe 95 PID 3880 wrote to memory of 3612 3880 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe 95 PID 3880 wrote to memory of 3612 3880 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe 95 PID 3440 wrote to memory of 1796 3440 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe 96 PID 3440 wrote to memory of 1796 3440 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe 96 PID 3440 wrote to memory of 1796 3440 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe 96 PID 2104 wrote to memory of 4268 2104 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe 97 PID 2104 wrote to memory of 4268 2104 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe 97 PID 2104 wrote to memory of 4268 2104 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe 97 PID 1728 wrote to memory of 2336 1728 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe 98 PID 1728 wrote to memory of 2336 1728 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe 98 PID 1728 wrote to memory of 2336 1728 8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe 98
Processes
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"1⤵
- Checks computer location settings
- Adds Run key to start application
- Enumerates connected drives
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2104 -
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1856 -
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3440 -
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:1796
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:4436
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"6⤵PID:3136
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"7⤵PID:8388
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"7⤵PID:1008
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"6⤵PID:5628
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"7⤵PID:9328
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"7⤵PID:13036
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"6⤵PID:6756
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"7⤵PID:12240
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"6⤵PID:8140
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"6⤵PID:9656
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:4260
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"6⤵PID:6636
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"7⤵PID:11016
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"6⤵PID:8712
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"6⤵PID:4256
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:5448
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"6⤵PID:10268
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:6320
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"6⤵PID:3044
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:8056
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:9932
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:2968
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:3328
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"6⤵PID:7988
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"6⤵PID:10012
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:5588
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"6⤵PID:9276
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"6⤵PID:12584
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:6800
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"6⤵PID:12256
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:8228
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:10804
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:4512
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:6920
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"6⤵PID:12264
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:8212
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:10784
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:5268
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:9284
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:12576
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:6140
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:11140
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:7708
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:9996
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:4780 -
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:4388
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:4824
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"6⤵PID:7084
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"6⤵PID:9040
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"6⤵PID:11284
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:5516
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"6⤵PID:9800
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:6396
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"6⤵PID:11852
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:8168
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:10060
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:4916
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:6972
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:8380
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:3356
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:5460
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:9268
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:12568
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:6440
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:11476
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:8176
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:10044
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"3⤵PID:5012
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:520
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:7172
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:9024
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:9416
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:5400
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:9336
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:13044
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:6748
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:12224
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:8136
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:9632
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"3⤵PID:1836
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:6456
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:11484
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:6072
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:10052
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"3⤵PID:5136
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:7568
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:10260
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"3⤵PID:5872
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:8696
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"3⤵PID:7124
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:11840
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"3⤵PID:8632
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"3⤵PID:436
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3880 -
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"3⤵PID:3612
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:4680
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:3712
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"6⤵PID:8200
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"6⤵PID:9528
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:6048
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"6⤵PID:4772
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:7132
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"6⤵PID:12272
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:2240
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:11728
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:3500
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:6196
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:9032
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:11392
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:5432
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:9260
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:12556
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:6388
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:4164
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:8160
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:10020
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"3⤵PID:4296
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:4924
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:7348
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:9748
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:5620
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:9388
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:6740
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:11944
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:8148
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:8624
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"3⤵PID:2556
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:6464
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:11292
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:3684
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:2304
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"3⤵PID:5244
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:9292
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:13028
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"3⤵PID:5508
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:11104
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"3⤵PID:7656
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"3⤵PID:9836
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1728 -
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"3⤵PID:2336
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:3620
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:7340
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:9684
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:5368
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:9364
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:13052
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:6312
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:11400
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:8060
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:10004
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"3⤵PID:3252
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:6328
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:12248
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:8152
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:10068
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"3⤵PID:5160
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:9236
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:5224
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"3⤵PID:5904
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:10504
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"3⤵PID:7012
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:11860
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"3⤵PID:8724
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"3⤵PID:8648
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"2⤵PID:4268
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"3⤵PID:1788
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:7040
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"5⤵PID:12232
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:8828
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:10608
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"3⤵PID:5216
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:8184
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:10076
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"3⤵PID:6100
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:10812
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"3⤵PID:7180
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"3⤵PID:9252
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"3⤵PID:11092
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"2⤵PID:4744
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"3⤵PID:6056
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:9616
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"3⤵PID:6628
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"4⤵PID:12332
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"3⤵PID:7576
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"3⤵PID:12280
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"2⤵PID:5076
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"3⤵PID:8644
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"3⤵PID:11952
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"2⤵PID:5636
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"3⤵PID:9652
-
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"2⤵PID:6928
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"2⤵PID:8372
-
-
C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8e30a8db8d13695782510a9dc3392ab0_NeikiAnalytics.exe"2⤵PID:11132
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4244 --field-trial-handle=2284,i,9807419199535700662,2319175108930815708,262144 --variations-seed-version /prefetch:81⤵PID:7760
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\chinese fucking blowjob lesbian glans lady (Janette,Jade).rar.exe
Filesize1.9MB
MD59f9dd89c8e07aaf2d4f2a2bf32adaca6
SHA1683c329910659672d294b4c96c2e23725f13e43d
SHA2563383c9aff41b0547dcf04911b420db3bc669d2b48824f1e2b8f4c4f89f94a36b
SHA512c691fd7c39521390dfa75a81a2757978bea3976c03416f09c286f9a21b6959555dbcb248ed98f6906b369279f2c96d07f018a71f01797a5467448ba51ae34cc2