Analysis
-
max time kernel
13s -
max time network
66s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
16-05-2024 13:02
Behavioral task
behavioral1
Sample
dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe
-
Size
1.1MB
-
MD5
dfb14938ced66474d65a99d03caf3d20
-
SHA1
30b205256208bef1fbda4a98ac9a3c9b8b1889dd
-
SHA256
d564076cc38a895ff9a94a0a8e4b3816bd8ee94092e1ded5603b5f091ab4c0cd
-
SHA512
6544b9a97dcf847a36abce8f9c6aede4b9d48697a119a1064779ddd00792cf4321db65b1ac01bc11380b81447936eb964036838aff9f8082d1fb70cf513c4f21
-
SSDEEP
24576:Vry8fStKGc2ppYnQLYUlYc7lD7O6n4Uz9kGUdAYe5Elt0ZKK8Um:hz2B7JYBcZeOmSYesJrr
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 16 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000\Control Panel\International\Geo\Nation dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000\Control Panel\International\Geo\Nation dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000\Control Panel\International\Geo\Nation dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000\Control Panel\International\Geo\Nation dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000\Control Panel\International\Geo\Nation dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000\Control Panel\International\Geo\Nation dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000\Control Panel\International\Geo\Nation dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000\Control Panel\International\Geo\Nation dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000\Control Panel\International\Geo\Nation dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000\Control Panel\International\Geo\Nation dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000\Control Panel\International\Geo\Nation dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000\Control Panel\International\Geo\Nation dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000\Control Panel\International\Geo\Nation dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000\Control Panel\International\Geo\Nation dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000\Control Panel\International\Geo\Nation dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000\Control Panel\International\Geo\Nation dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
resource yara_rule behavioral2/memory/4988-0-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/files/0x0007000000023420-5.dat upx behavioral2/memory/2336-56-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1820-182-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2056-183-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4988-184-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3296-186-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2336-185-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2192-188-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4540-187-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3508-190-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4988-189-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4584-192-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2064-191-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4336-193-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3396-196-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1728-195-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1820-194-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2056-197-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/540-198-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3984-201-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5068-200-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4244-199-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1272-203-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2568-202-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4976-204-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1116-205-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3296-206-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4056-209-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1756-210-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/2192-207-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4420-208-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5148-212-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1524-211-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3396-219-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1728-218-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5292-217-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1180-216-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5300-221-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1176-220-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5068-222-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5308-224-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/3984-223-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5340-229-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4776-230-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1116-228-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5324-226-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5332-227-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1272-225-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5356-232-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4056-231-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/1864-234-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4916-233-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5364-235-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/4872-237-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5148-236-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5452-239-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5396-244-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5448-243-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5300-242-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5292-238-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/6152-254-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/5316-255-0x0000000000400000-0x000000000041E000-memory.dmp upx behavioral2/memory/6524-259-0x0000000000400000-0x000000000041E000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\L: dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File opened (read-only) \??\M: dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File opened (read-only) \??\R: dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File opened (read-only) \??\E: dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File opened (read-only) \??\G: dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File opened (read-only) \??\H: dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File opened (read-only) \??\J: dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File opened (read-only) \??\K: dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File opened (read-only) \??\S: dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File opened (read-only) \??\V: dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File opened (read-only) \??\X: dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File opened (read-only) \??\Z: dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File opened (read-only) \??\N: dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File opened (read-only) \??\T: dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File opened (read-only) \??\Y: dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File opened (read-only) \??\A: dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File opened (read-only) \??\B: dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File opened (read-only) \??\O: dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File opened (read-only) \??\W: dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File opened (read-only) \??\I: dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File opened (read-only) \??\P: dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File opened (read-only) \??\Q: dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File opened (read-only) \??\U: dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe -
Drops file in System32 directory 12 IoCs
description ioc Process File created C:\Windows\SysWOW64\FxsTmp\swedish gang bang xxx lesbian boobs lady (Liz).rar.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\norwegian kicking lesbian .mpg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\horse nude hot (!) swallow .rar.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\System32\LogFiles\Fax\Incoming\beastiality uncut hotel (Sonja).mpeg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\indian gang bang action masturbation mature (Sonja).zip.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\horse sleeping mistress .mpeg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\swedish fucking beastiality hot (!) hole (Kathrin).mpeg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\black lingerie animal catfight boobs .zip.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\italian cum catfight 40+ .mpeg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\System32\DriverStore\Temp\chinese porn cumshot hot (!) (Curtney).rar.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\tyrkish lingerie big hole (Ashley,Sylvia).mpg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\blowjob hot (!) titts boots .avi.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe -
Drops file in Program Files directory 18 IoCs
description ioc Process File created C:\Program Files\Microsoft Office\root\Templates\chinese animal sperm catfight redhair (Sylvia,Janette).rar.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\horse catfight hotel .mpeg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\Microsoft Shared\canadian horse catfight wifey (Melissa,Tatjana).mpeg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Temp\lesbian [free] pregnant .zip.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\Temp\canadian beast sleeping cock .mpg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Program Files\Common Files\microsoft shared\sperm licking redhair .mpg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\canadian lingerie nude [free] bedroom .zip.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\italian fucking uncut hotel .zip.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Program Files\dotnet\shared\canadian trambling full movie .zip.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\chinese horse cum masturbation hairy .avi.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft SQL Server\130\Shared\nude voyeur vagina (Jenna,Sylvia).mpeg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft SQL Server\130\Shared\lingerie [milf] balls .rar.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\Updates\Download\sperm bukkake several models granny .avi.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\animal big glans beautyfull .mpeg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\asian horse [milf] mistress (Jade,Kathrin).mpg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\PrintAndShare\xxx sleeping (Sandy,Jade).avi.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Update\Download\cum several models .rar.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\Download\beast public hole bondage .rar.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\SystemResources\Windows.UI.ShellCommon\SharePickerUI\japanese xxx nude hot (!) .mpeg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost_31bf3856ad364e35_10.0.19041.1202_none_621728fcd3c9d5f6\cumshot licking vagina traffic .zip.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.746_none_ab42fb092bda9182\beast bukkake [bangbus] legs balls .zip.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..ore-shareexperience_31bf3856ad364e35_10.0.19041.1_none_f42978969c79336a\brasilian lesbian uncut ash ash .rar.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ces-ime-eashared-lm_31bf3856ad364e35_10.0.19041.1_none_3d0229d17c310f10\british bukkake bukkake [bangbus] titts .rar.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_ee7ea14f7d8a3ee3\brasilian beast lesbian titts .avi.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-service-shared_31bf3856ad364e35_10.0.19041.1_none_3cfd44d351b1a8ab\sperm fetish public cock boots (Sandy).zip.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Templates\swedish hardcore horse lesbian hole girly .mpeg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_en-us_215194e2327a46ac\handjob public .zip.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.84_none_81616275259e37fe\cumshot licking legs circumcision (Melissa,Curtney).mpg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.1_none_5d54c0aac5c3c12c\malaysia fucking action big stockings .mpg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.844_none_855aff45853749ef\lingerie sleeping hotel .avi.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_10.0.19041.572_none_cf90e12518baac85\italian gang bang gang bang uncut nipples bondage .rar.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_it-it_adfc5e0bfca53431\italian bukkake gay catfight femdom .rar.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-service-shared_31bf3856ad364e35_10.0.19041.1151_none_fbdc4c5f677dc2ec\handjob full movie gorgeoushorny (Christine).mpeg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-ime-eashared-ccshared_31bf3856ad364e35_10.0.19041.1_none_8c0b126c198fcf70\italian horse lesbian fishy (Tatjana).avi.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor\chinese action gay sleeping (Samantha).rar.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.928_none_33e0d5558cdd7c61\norwegian beastiality girls nipples castration (Jade).mpeg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.1_none_2fe79eae2833b9b1\fetish [milf] (Ashley,Jade).mpg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_es-es_bf79b5fcc06b3128\black horse xxx girls (Liz,Kathrin).mpg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_fd7349c396c417ae\beast lesbian hotel (Britney).mpg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\Downloads\horse lingerie catfight mature (Britney,Kathrin).mpeg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_de-de_7860bee9439c3ae7\nude girls vagina boots .mpg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-composable-sharepicker_31bf3856ad364e35_10.0.19041.1_none_c87e96327faffd0e\japanese animal [free] .mpeg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_es-es_30d7585a049f5b52\fetish fetish sleeping vagina .avi.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.844_none_67b5915b5651dd8a\horse sleeping cock shoes (Kathrin,Sarah).mpeg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_10.0.19041.906_none_ef0e010d1381269b\japanese porn horse [milf] boobs .mpg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-mccs-engineshared_31bf3856ad364e35_10.0.19041.746_none_d404daff82e97769\american cum [free] .mpeg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Templates\norwegian lesbian horse public .rar.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.746_none_1bbb9ab9fc52bac9\beast fetish [free] young (Sarah,Sylvia).rar.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_10.0.19041.1_none_a7ad1894592cfa12\african lingerie [milf] vagina (Sarah).avi.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-m..ineshared.resources_31bf3856ad364e35_10.0.19041.1_en-us_99ddc8ce8d3d6dac\porn action [free] legs .zip.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_89c0bf1761110f07\canadian fucking cumshot sleeping gorgeoushorny .avi.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_de-de_16bd831fd16633be\bukkake action [bangbus] vagina beautyfull (Kathrin,Melissa).mpg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-h..public-utils-shared_31bf3856ad364e35_10.0.19041.1_none_19d22204a1f3fcaf\italian trambling catfight glans hotel (Christine,Ashley).rar.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-manager-shared_31bf3856ad364e35_10.0.19041.153_none_e23c926e32d07dc1\fucking [free] circumcision (Melissa).zip.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..s-ime-eashared-ihds_31bf3856ad364e35_10.0.19041.1_none_e8996b7d3512363f\african cumshot sleeping hole (Ashley,Janette).rar.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\Downloads\danish animal handjob [free] lady .mpeg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\templates\french action action catfight shoes (Jade).rar.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_c3d467c525734eb3\lesbian beastiality masturbation fishy .zip.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-ime-eashared-proxy_31bf3856ad364e35_10.0.19041.1_none_4c786ae2f508e6d5\spanish cum trambling full movie .mpeg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_d38ece58f77171b4\brasilian beastiality catfight (Karin).zip.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-a..gement-uevtemplates_31bf3856ad364e35_10.0.19041.1_none_0d66b54875835a49\horse full movie lady (Sonja).avi.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.1_none_833abdc06c68d338\spanish beast sleeping bondage .mpg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.1_none_9aa486d790131d4e\japanese gay hidden titts .mpg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\inclusiveOobe\view\templates\trambling girls .mpg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_es-es_211cf1c632a13851\canadian beastiality licking (Sarah).zip.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\CbsTemp\chinese action trambling voyeur feet .rar.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor.Resources\malaysia horse [milf] gorgeoushorny .avi.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-b..-bcdtemplate-client_31bf3856ad364e35_10.0.19041.1_none_de1581e9a275faf8\lingerie hot (!) ash (Sonja).zip.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.867_none_c29826784f9429f8\beastiality licking legs upskirt .mpeg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-h..public-utils-shared_31bf3856ad364e35_10.0.19041.1202_none_d8a1416ab7cccdcf\norwegian cum [bangbus] .mpeg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p..al-securitytemplate_31bf3856ad364e35_10.0.19041.1_none_a3d9a07cf2290837\russian gay horse voyeur beautyfull .mpeg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\InputMethod\SHARED\danish xxx lesbian hairy .mpeg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\chinese cum beast big granny .mpg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_en-us_310bfb76047869ad\hardcore kicking [milf] (Gina,Curtney).zip.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..se-shared-datafiles_31bf3856ad364e35_10.0.19041.1_none_2f5f00d280dce9f6\lingerie horse licking glans redhair (Melissa,Ashley).zip.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_it-it_4c5922428a6f2d08\cumshot cumshot [bangbus] cock blondie .avi.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.1_none_0bc0f3d4cd7dc8fd\british cum [milf] ash .rar.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.746_none_2212358fc33cc10f\fucking blowjob full movie .rar.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_10.0.19041.1_none_c6da8048542fddc7\british cum hot (!) .mpeg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\fetish uncut 40+ .mpeg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.867_en-us_49453482f1fb5356\porn horse voyeur .zip.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..nearshareexperience_31bf3856ad364e35_10.0.19041.1288_none_ca3007304990b2ea\trambling gang bang uncut upskirt .mpg.exe dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4988 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 4988 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 2336 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 2336 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 4988 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 4988 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 4540 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 4540 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 3508 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 3508 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 4988 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 4988 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 2336 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 2336 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 4584 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 4584 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 2064 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 2064 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 4988 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 4988 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 4336 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 4336 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 1820 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 1820 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 4540 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 4540 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 2336 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 2336 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 3508 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 3508 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 2056 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 2056 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 4988 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 4988 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 540 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 540 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 2568 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 2568 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 4244 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 4244 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 4976 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 4976 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 3296 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 3296 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 4540 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 4540 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 4584 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 4584 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 2064 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 2064 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 3508 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 3508 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 2336 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 2336 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 2192 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 2192 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 4420 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 4420 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 4336 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 4336 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 1820 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 1820 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 1756 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 1756 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 4988 wrote to memory of 2336 4988 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 87 PID 4988 wrote to memory of 2336 4988 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 87 PID 4988 wrote to memory of 2336 4988 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 87 PID 4988 wrote to memory of 4540 4988 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 88 PID 4988 wrote to memory of 4540 4988 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 88 PID 4988 wrote to memory of 4540 4988 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 88 PID 2336 wrote to memory of 3508 2336 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 89 PID 2336 wrote to memory of 3508 2336 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 89 PID 2336 wrote to memory of 3508 2336 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 89 PID 4540 wrote to memory of 2064 4540 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 92 PID 4540 wrote to memory of 2064 4540 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 92 PID 4540 wrote to memory of 2064 4540 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 92 PID 4988 wrote to memory of 4584 4988 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 93 PID 4988 wrote to memory of 4584 4988 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 93 PID 4988 wrote to memory of 4584 4988 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 93 PID 2336 wrote to memory of 4336 2336 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 94 PID 2336 wrote to memory of 4336 2336 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 94 PID 2336 wrote to memory of 4336 2336 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 94 PID 3508 wrote to memory of 1820 3508 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 95 PID 3508 wrote to memory of 1820 3508 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 95 PID 3508 wrote to memory of 1820 3508 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 95 PID 4988 wrote to memory of 2056 4988 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 99 PID 4988 wrote to memory of 2056 4988 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 99 PID 4988 wrote to memory of 2056 4988 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 99 PID 4584 wrote to memory of 540 4584 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 101 PID 4584 wrote to memory of 540 4584 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 101 PID 4584 wrote to memory of 540 4584 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 101 PID 4540 wrote to memory of 2568 4540 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 100 PID 4540 wrote to memory of 2568 4540 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 100 PID 4540 wrote to memory of 2568 4540 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 100 PID 2064 wrote to memory of 4244 2064 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 102 PID 2064 wrote to memory of 4244 2064 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 102 PID 2064 wrote to memory of 4244 2064 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 102 PID 3508 wrote to memory of 4976 3508 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 103 PID 3508 wrote to memory of 4976 3508 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 103 PID 3508 wrote to memory of 4976 3508 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 103 PID 2336 wrote to memory of 3296 2336 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 104 PID 2336 wrote to memory of 3296 2336 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 104 PID 2336 wrote to memory of 3296 2336 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 104 PID 4336 wrote to memory of 2192 4336 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 105 PID 4336 wrote to memory of 2192 4336 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 105 PID 4336 wrote to memory of 2192 4336 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 105 PID 1820 wrote to memory of 4420 1820 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 106 PID 1820 wrote to memory of 4420 1820 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 106 PID 1820 wrote to memory of 4420 1820 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 106 PID 4988 wrote to memory of 1756 4988 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 109 PID 4988 wrote to memory of 1756 4988 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 109 PID 4988 wrote to memory of 1756 4988 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 109 PID 4584 wrote to memory of 1524 4584 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 110 PID 4584 wrote to memory of 1524 4584 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 110 PID 4584 wrote to memory of 1524 4584 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 110 PID 2064 wrote to memory of 1180 2064 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 111 PID 2064 wrote to memory of 1180 2064 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 111 PID 2064 wrote to memory of 1180 2064 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 111 PID 3508 wrote to memory of 1728 3508 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 112 PID 3508 wrote to memory of 1728 3508 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 112 PID 3508 wrote to memory of 1728 3508 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 112 PID 4540 wrote to memory of 3396 4540 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 113 PID 4540 wrote to memory of 3396 4540 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 113 PID 4540 wrote to memory of 3396 4540 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 113 PID 2336 wrote to memory of 1176 2336 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 114 PID 2336 wrote to memory of 1176 2336 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 114 PID 2336 wrote to memory of 1176 2336 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 114 PID 1820 wrote to memory of 5068 1820 dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe 115
Processes
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"1⤵
- Checks computer location settings
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4988 -
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2336 -
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3508 -
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1820 -
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4420 -
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:5148
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:5448
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:8740
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"9⤵PID:19012
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"9⤵PID:26416
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:12548
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"9⤵PID:28016
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:15936
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:23416
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:6776
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:12628
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:16800
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:25096
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:9068
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:21140
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:27716
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:12484
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:15880
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:6504
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:5292
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:8764
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:19344
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:27216
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:12572
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:16864
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:24956
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:6784
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:13108
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:18964
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:26392
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:8748
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:19392
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:27120
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:12564
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:15960
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:23432
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:5068
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:6192
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:9452
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:21128
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:27724
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:12404
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:15896
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:23396
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:7448
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:15840
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:23076
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:8488
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:15992
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:23424
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:12292
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:16308
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:23368
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:5364
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:9460
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:19336
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:26644
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:12420
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:16340
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:8164
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:6840
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:12636
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:16792
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:24520
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:9420
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:15428
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:6016
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:12412
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:15476
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:6420
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4976 -
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:1116
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:6524
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:9840
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:19096
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:21300
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:12460
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:14576
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:24604
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:8004
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:15752
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:6328
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:10836
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:27112
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:12220
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:28096
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:15904
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:10580
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:5348
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:8788
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:19044
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:26520
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:12540
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:16808
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:25080
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:6856
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:17572
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:5444
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:9036
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:15784
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:14352
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:12524
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:15944
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:14476
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:1728
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:6508
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:9956
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:15452
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:21620
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:12372
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:16364
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:23864
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:8012
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:19104
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:26512
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:10604
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:21580
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:27776
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:1020
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:16316
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:22972
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:5388
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:8412
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:17728
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:25724
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:12668
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:17508
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:16508
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:6824
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:13100
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:16848
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:24512
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:9028
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:17604
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:17640
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:12452
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:17524
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:25708
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4336 -
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:2192 -
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:4872
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:6464
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:10504
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:21120
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:27704
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:12284
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:15856
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:14460
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:7832
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:17596
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:18608
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:10140
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:15444
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:5548
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:2708
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:16284
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:24780
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:5300
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:9384
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:17564
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:24580
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:12428
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:15952
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:13824
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:6792
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:12596
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:18996
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:21464
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:8952
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:15588
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:6200
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:12476
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:16752
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:24492
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:3984
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:6224
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:8420
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:19036
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:26504
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:12660
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:16888
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:24064
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:7412
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:19144
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:27144
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:10064
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:19376
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:27128
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:12348
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:16372
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:13900
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:5356
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:8632
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:19080
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:26492
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:12588
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:16816
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:24628
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:6848
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:12968
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:29004
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:16768
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:25308
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:9076
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:18160
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:25732
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:12500
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:28600
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:18980
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:4700
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:3296 -
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:4776
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:6480
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:9364
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:19248
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:15504
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:12188
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:1768
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:14408
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:7808
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:15792
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:13976
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:10300
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:15388
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:5988
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:3768
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:18972
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:26400
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:5332
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:9972
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:13728
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:19004
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:26408
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:12300
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:28580
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:16744
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:25088
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:6872
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:12620
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:16776
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:24788
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:9044
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:15572
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:22996
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:12508
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:16760
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:17888
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:1176
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:6548
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:9928
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:16008
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:13304
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:12468
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:16856
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:24772
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:8036
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:15776
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:6292
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:10628
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:27340
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:12268
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:19112
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:26636
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:5372
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:8552
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:17720
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:17872
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:12644
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:17476
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:18920
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:6800
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:19360
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:26660
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:8756
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:19368
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:26668
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:12556
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:15984
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:13288
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4540 -
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2064 -
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4244 -
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:1272
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:6232
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:10076
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:14512
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"8⤵PID:5956
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:12324
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:16380
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:13944
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:7728
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:15768
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:9256
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:4432
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:15492
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:6412
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:12340
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:16292
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:24612
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:5340
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:8944
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:17556
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:19924
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:12212
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:27988
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:16228
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:13776
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:6864
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:13124
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:17540
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:18512
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:9012
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:15672
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:6488
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:12196
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:15920
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:13868
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:1180
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:5452
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:8984
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:18240
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:19896
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:12780
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:16896
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:25064
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:6808
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:13720
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:17532
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:25716
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:8996
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:16000
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:13284
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:12204
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:16220
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:24620
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:5396
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:9944
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:16268
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:24796
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:12332
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:16300
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:25072
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:6904
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:12612
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:16832
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:24504
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:8976
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:15760
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:13828
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:12580
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:17492
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:17844
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:2568 -
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:4916
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:6184
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:8428
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:18264
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:18712
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:12676
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:16840
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:18288
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:7424
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:19028
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:26484
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:9476
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:14520
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:5980
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:12308
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:28576
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:16348
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:14400
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:5324
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:8968
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:21112
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:27732
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:12532
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:19384
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:26676
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:6880
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:13092
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:16824
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:18532
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:9060
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:19088
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:26476
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:12492
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:16880
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:17672
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:3396
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:6656
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:11000
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:23288
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:12260
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:15872
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:14008
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:7996
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:19128
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:12116
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:10528
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:19352
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:26652
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:12276
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:16784
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:25560
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:5380
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:9676
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:13508
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:5952
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:12228
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:15436
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:6344
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:6832
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:12652
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:18988
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:25936
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:9004
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:17580
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:19320
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:12236
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:28008
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:15468
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:6636
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4584 -
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:540 -
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:4056
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:6516
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:7252
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:14528
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"7⤵PID:2376
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:2344
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:16324
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:9540
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:8028
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:19020
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:2232
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:10968
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:22784
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:12252
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:16204
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:14472
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:5316
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:9684
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:15580
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:5920
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:12380
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:28104
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:16212
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:24596
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:6888
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:12604
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:17500
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:24760
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:9168
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:15848
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:6388
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:12444
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:15888
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:23872
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:1524
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:6152
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:9936
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:15552
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:6160
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:12364
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:15864
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:23880
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:7860
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:19152
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:10824
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:10292
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:15380
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:5136
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:4708
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:16872
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:17836
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:5404
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:9876
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:17588
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:18648
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:12388
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:15968
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:14052
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:6816
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:13140
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:17468
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:17840
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:8960
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:16260
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:23680
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:12436
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:28388
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:15928
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:23400
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:2056 -
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:1864
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:6472
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:10360
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:18248
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"6⤵PID:13164
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:10644
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:16736
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:24660
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:8020
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:19136
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:26684
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:10596
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:21340
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:28608
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:9608
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:16276
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:9436
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:5308
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:9832
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:15372
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:4488
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:12740
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:17544
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:18604
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:6896
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:13132
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:17484
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:15660
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:9052
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:17712
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:18632
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:12516
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:28396
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:16236
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:13736
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
PID:1756 -
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:6164
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:9884
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:16016
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"5⤵PID:24812
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:12316
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:15912
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:23408
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:7400
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:20304
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:27316
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:10056
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:19052
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:27136
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:12356
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:28592
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:16356
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:13896
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"2⤵PID:5412
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:9760
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:15680
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"4⤵PID:3412
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:12396
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:15976
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:23440
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"2⤵PID:6912
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:13116
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:17516
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:18612
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"2⤵PID:9088
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:19120
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:26628
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"2⤵PID:12244
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"3⤵PID:28000
-
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"2⤵PID:15400
-
-
C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dfb14938ced66474d65a99d03caf3d20_NeikiAnalytics.exe"2⤵PID:6076
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\chinese horse cum masturbation hairy .avi.exe
Filesize1.2MB
MD56ffe656ad0668807d10694218fbc556f
SHA17d979526a52b1213dd8686b4bc55e603e75ee584
SHA256ea1c4dd8f631b4d6a81de221925dc6e80b4df66bf245e56ed0d7fbdd60a18efa
SHA51215b838f726e0a7301c7a9895e970b8759ef89b20512c44cfdd6bf313f49976044dcee4c56755f89e3a34ee20f4eea7f54a9afc95073768d8b5b462d719475612