Analysis
-
max time kernel
11s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
01-06-2024 07:03
Behavioral task
behavioral1
Sample
91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe
-
Size
196KB
-
MD5
91e9aacdc9cd30f9121243eaced08480
-
SHA1
cd3332bb55dfcdde6eff97aad799d1c0c55b95aa
-
SHA256
cfe32acde17b93a38f7c601f6c9bf0591a6812dbebb164296aead21ff4be6d7d
-
SHA512
2d859841d8ea0de3de8768bb05be912f48701a016eb72e0a126836da3d26fc047c48ce65d2eb8556cffb1c3f81380e220c41424c9f22e1dab5446d061e316c9c
-
SSDEEP
6144:CjluQoSIIo5RxX+ACs33dinSQZ1dfKaGj:CEQoSs1LxfQZ1W
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 11 IoCs
Looks up country code configured in the registry, likely geofence.
Processes:
91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exedescription ioc Process Key value queried \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Control Panel\International\Geo\Nation 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Control Panel\International\Geo\Nation 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Control Panel\International\Geo\Nation 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Control Panel\International\Geo\Nation 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Control Panel\International\Geo\Nation 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Control Panel\International\Geo\Nation 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Control Panel\International\Geo\Nation 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Control Panel\International\Geo\Nation 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Control Panel\International\Geo\Nation 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Control Panel\International\Geo\Nation 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Control Panel\International\Geo\Nation 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Processes:
resource yara_rule behavioral2/memory/4144-0-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/files/0x000a0000000232f9-5.dat upx behavioral2/memory/4692-13-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/3636-148-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5104-169-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/2572-170-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/1112-171-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/2316-190-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/2268-191-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/2860-194-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/4680-193-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/4144-192-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/1260-197-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/4528-196-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/4692-195-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/2224-199-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/3636-198-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/4144-200-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/2572-201-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/1112-202-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/2316-205-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5196-204-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/4576-203-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5356-208-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/4680-207-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5304-206-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5460-212-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5440-211-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/1260-210-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/4528-209-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/3232-213-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5544-215-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5536-214-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5644-218-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5636-217-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/2980-216-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5720-221-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/4584-220-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/1044-219-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5168-225-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5872-227-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5196-226-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5976-233-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5968-232-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5960-231-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5944-230-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5216-229-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5880-228-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5304-234-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5544-243-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5356-237-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5780-250-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/6700-247-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5644-246-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5636-245-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5460-241-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5440-240-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/6548-239-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/6532-238-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5772-249-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/6920-258-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/6868-257-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5960-260-0x0000000000400000-0x000000000041F000-memory.dmp upx behavioral2/memory/5928-259-0x0000000000400000-0x000000000041F000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
Processes:
91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exedescription ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
Processes:
91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exedescription ioc Process File opened (read-only) \??\K: 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File opened (read-only) \??\L: 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File opened (read-only) \??\U: 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File opened (read-only) \??\B: 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File opened (read-only) \??\J: 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File opened (read-only) \??\O: 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File opened (read-only) \??\P: 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File opened (read-only) \??\Y: 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File opened (read-only) \??\A: 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File opened (read-only) \??\E: 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File opened (read-only) \??\G: 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File opened (read-only) \??\H: 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File opened (read-only) \??\Q: 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File opened (read-only) \??\V: 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File opened (read-only) \??\Z: 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File opened (read-only) \??\X: 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File opened (read-only) \??\I: 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File opened (read-only) \??\M: 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File opened (read-only) \??\N: 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File opened (read-only) \??\R: 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File opened (read-only) \??\S: 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File opened (read-only) \??\T: 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File opened (read-only) \??\W: 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe -
Drops file in System32 directory 12 IoCs
Processes:
91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exedescription ioc Process File created C:\Windows\SysWOW64\config\systemprofile\russian handjob bukkake several models glans girly .rar.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\fucking voyeur feet sweet (Karin).avi.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\black kicking trambling hot (!) high heels .mpg.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\trambling hidden ash (Ashley,Tatjana).rar.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\System32\DriverStore\Temp\lingerie uncut ejaculation .avi.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\russian kicking fucking hot (!) hole 50+ (Liz).mpg.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\System32\LogFiles\Fax\Incoming\brasilian porn lesbian several models .rar.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\black gang bang lingerie [milf] .rar.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\gay hot (!) (Sylvia).avi.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\indian handjob hardcore public cock young (Samantha).mpg.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\xxx [free] fishy .avi.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\gay voyeur glans .mpeg.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe -
Drops file in Program Files directory 19 IoCs
Processes:
91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exedescription ioc Process File created C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\PrintAndShare\lesbian full movie (Sylvia).zip.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\spanish trambling lesbian cock lady (Tatjana).mpeg.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\sperm sleeping .avi.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\Templates\blowjob hot (!) titts .avi.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\lingerie catfight glans ejaculation .zip.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\tyrkish beastiality lesbian big .avi.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\Updates\Download\black porn fucking lesbian glans lady (Curtney).rar.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\hardcore [free] hole young .rar.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\Download\bukkake voyeur feet black hairunshaved .zip.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\Temp\blowjob girls glans blondie .mpg.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\Install\{6BB39B16-79FA-4D8E-BB79-4EFE59F95F66}\EDGEMITMP_509DC.tmp\indian gang bang beast girls (Karin).avi.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Program Files\Common Files\microsoft shared\danish animal trambling [bangbus] bedroom .rar.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft SQL Server\130\Shared\blowjob catfight hole .avi.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Temp\trambling masturbation .mpg.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Update\Download\tyrkish beastiality beast [milf] titts .rar.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\blowjob sleeping beautyfull .zip.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Program Files\dotnet\shared\trambling voyeur titts ejaculation .zip.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft SQL Server\130\Shared\indian animal lesbian [free] (Liz).zip.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\Microsoft Shared\swedish handjob beast girls bondage .rar.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe -
Drops file in Windows directory 64 IoCs
Processes:
91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exedescription ioc Process File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.746_none_d01527cffa9c25bc\german blowjob voyeur mistress .zip.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.746_none_2212358fc33cc10f\gang bang lingerie lesbian latex .mpg.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\assembly\tmp\xxx licking glans .avi.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.1_none_0bc0f3d4cd7dc8fd\malaysia horse catfight cock circumcision .rar.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ces-ime-eashared-lm_31bf3856ad364e35_10.0.19041.1_none_3d0229d17c310f10\nude sperm licking cock high heels (Jade).avi.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost_31bf3856ad364e35_10.0.19041.1202_none_621728fcd3c9d5f6\canadian hardcore masturbation titts .rar.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-a..gement-uevtemplates_31bf3856ad364e35_10.0.19041.1_none_0d66b54875835a49\beastiality horse masturbation hotel .rar.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_d38ece58f77171b4\african lingerie big upskirt .mpg.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5fdc43acc1be690d\asian gay several models glans beautyfull (Liz).mpeg.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.84_none_81616275259e37fe\asian bukkake hot (!) feet .mpeg.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.867_none_c29826784f9429f8\italian gang bang blowjob licking leather .zip.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\inclusiveOobe\view\templates\gay catfight balls .avi.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\templates\lesbian full movie sweet .avi.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_es-es_30d7585a049f5b52\lingerie catfight gorgeoushorny (Christine,Tatjana).mpg.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.844_none_855aff45853749ef\kicking trambling [milf] .avi.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.1_none_f3b35d713ce0fc7f\porn beast public 40+ (Sonja,Curtney).zip.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.1_none_a80cea873b2a6772\german lingerie catfight penetration (Ashley,Sylvia).avi.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..s-ime-eashared-ihds_31bf3856ad364e35_10.0.19041.1_none_e8996b7d3512363f\american horse horse licking hole .mpg.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\gay sleeping feet 50+ .rar.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\brasilian nude xxx lesbian boots .mpeg.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.1_none_5d54c0aac5c3c12c\german trambling licking .rar.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_uk-ua_5b152a8d329397ec\nude bukkake licking feet shower (Liz).mpeg.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.844_none_67b5915b5651dd8a\nude hardcore lesbian titts redhair .rar.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.1_none_9aa486d790131d4e\german bukkake sleeping 40+ .rar.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\japanese handjob gay hidden pregnant .rar.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\Downloaded Program Files\fucking catfight glans black hairunshaved .rar.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_en-us_215194e2327a46ac\chinese trambling full movie circumcision .mpg.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost_31bf3856ad364e35_10.0.19041.264_none_cb389cf57d74d691\american gang bang beast girls .zip.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.746_none_1bbb9ab9fc52bac9\beastiality trambling public (Tatjana).rar.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\black porn blowjob big glans beautyfull .mpeg.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_c3d467c525734eb3\bukkake sleeping upskirt .mpg.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.867_en-us_49453482f1fb5356\malaysia hardcore catfight .avi.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_10.0.19041.1_none_f07d4fae3e8e883f\tyrkish fetish blowjob uncut titts .rar.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\assembly\temp\horse lesbian castration .zip.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Templates\danish nude bukkake lesbian feet .rar.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.ShellCommon.SharedResources\gay hot (!) (Tatjana).mpg.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-ime-eashared-proxy_31bf3856ad364e35_10.0.19041.1_none_4c786ae2f508e6d5\russian kicking horse girls .zip.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\SharedFileCache\sperm [bangbus] (Samantha).mpg.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_es-es_211cf1c632a13851\danish animal blowjob full movie redhair .mpg.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.928_none_33e0d5558cdd7c61\handjob gay voyeur hole .mpeg.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor.Resources\japanese nude hardcore hot (!) blondie .avi.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-composable-sharepicker_31bf3856ad364e35_10.0.19041.1_none_c87e96327faffd0e\brasilian porn beast hot (!) sweet .mpg.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\mssrv.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\russian action lesbian voyeur titts mature (Melissa).mpeg.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor.Resources\italian kicking xxx [bangbus] bondage (Christine,Melissa).rar.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.789_en-us_58ebf9ecc407e3c0\horse gay uncut leather (Britney,Jade).avi.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.746_none_ab42fb092bda9182\chinese xxx sleeping glans circumcision (Sarah).avi.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.1_none_fa09f84703cb02c5\nude gay masturbation cock balls (Karin).mpeg.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Templates\lingerie several models hole sm (Sylvia).zip.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_it-it_bdb6c49fcea35732\american porn sperm lesbian titts sweet (Sylvia).zip.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-b..-bcdtemplate-client_31bf3856ad364e35_10.0.19041.1_none_de1581e9a275faf8\bukkake girls cock lady (Karin).avi.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.1_none_2fe79eae2833b9b1\sperm big glans high heels (Karin).rar.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\CbsTemp\american gang bang sperm masturbation hole redhair .avi.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.UI.ShellCommon\SharePickerUI\russian fetish xxx girls (Melissa).mpg.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_it-it_adfc5e0bfca53431\xxx several models .zip.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\Downloads\indian animal hardcore [bangbus] hairy (Sonja,Samantha).zip.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\american beastiality beast full movie cock .avi.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\InputMethod\SHARED\brasilian porn gay hidden (Janette).rar.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor\blowjob full movie glans hotel (Sarah).zip.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor\blowjob public (Samantha).zip.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\danish kicking gay several models .mpeg.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.1_none_833abdc06c68d338\british horse big feet ejaculation .mpg.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_de-de_881b257d159a5de8\danish fetish hardcore girls 50+ .zip.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_en-us_310bfb76047869ad\brasilian kicking trambling sleeping bondage .avi.exe 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 62 IoCs
Processes:
91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exepid Process 4144 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 4144 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 4692 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 4692 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 4144 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 4144 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 3636 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 3636 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 2224 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 2224 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 4144 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 4144 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 4692 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 4692 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 5104 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 5104 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 2572 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 2572 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 3636 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 3636 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 1112 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 1112 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 4144 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 4144 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 4692 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 4692 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 4576 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 4576 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 2224 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 2224 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 2316 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 2316 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 5104 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 5104 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 2268 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 2268 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 3636 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 3636 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 2860 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 2860 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 4680 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 4680 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 4692 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 4692 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 4144 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 4144 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 1260 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 1260 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 4528 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 4528 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 2572 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 2572 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 2224 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 2224 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 3232 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 3232 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 2980 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 2980 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 4576 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 4576 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 1112 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 1112 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 64 IoCs
Processes:
91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exedescription pid Process procid_target PID 4144 wrote to memory of 4692 4144 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 95 PID 4144 wrote to memory of 4692 4144 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 95 PID 4144 wrote to memory of 4692 4144 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 95 PID 4144 wrote to memory of 3636 4144 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 99 PID 4144 wrote to memory of 3636 4144 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 99 PID 4144 wrote to memory of 3636 4144 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 99 PID 4692 wrote to memory of 2224 4692 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 100 PID 4692 wrote to memory of 2224 4692 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 100 PID 4692 wrote to memory of 2224 4692 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 100 PID 3636 wrote to memory of 5104 3636 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 104 PID 3636 wrote to memory of 5104 3636 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 104 PID 3636 wrote to memory of 5104 3636 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 104 PID 4144 wrote to memory of 2572 4144 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 105 PID 4144 wrote to memory of 2572 4144 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 105 PID 4144 wrote to memory of 2572 4144 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 105 PID 4692 wrote to memory of 1112 4692 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 106 PID 4692 wrote to memory of 1112 4692 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 106 PID 4692 wrote to memory of 1112 4692 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 106 PID 2224 wrote to memory of 4576 2224 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 107 PID 2224 wrote to memory of 4576 2224 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 107 PID 2224 wrote to memory of 4576 2224 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 107 PID 5104 wrote to memory of 2316 5104 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 108 PID 5104 wrote to memory of 2316 5104 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 108 PID 5104 wrote to memory of 2316 5104 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 108 PID 3636 wrote to memory of 2268 3636 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 109 PID 3636 wrote to memory of 2268 3636 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 109 PID 3636 wrote to memory of 2268 3636 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 109 PID 4144 wrote to memory of 4680 4144 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 110 PID 4144 wrote to memory of 4680 4144 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 110 PID 4144 wrote to memory of 4680 4144 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 110 PID 4692 wrote to memory of 2860 4692 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 111 PID 4692 wrote to memory of 2860 4692 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 111 PID 4692 wrote to memory of 2860 4692 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 111 PID 2572 wrote to memory of 1260 2572 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 112 PID 2572 wrote to memory of 1260 2572 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 112 PID 2572 wrote to memory of 1260 2572 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 112 PID 2224 wrote to memory of 4528 2224 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 113 PID 2224 wrote to memory of 4528 2224 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 113 PID 2224 wrote to memory of 4528 2224 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 113 PID 1112 wrote to memory of 3232 1112 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 114 PID 1112 wrote to memory of 3232 1112 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 114 PID 1112 wrote to memory of 3232 1112 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 114 PID 4576 wrote to memory of 2980 4576 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 115 PID 4576 wrote to memory of 2980 4576 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 115 PID 4576 wrote to memory of 2980 4576 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 115 PID 5104 wrote to memory of 1044 5104 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 118 PID 5104 wrote to memory of 1044 5104 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 118 PID 5104 wrote to memory of 1044 5104 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 118 PID 3636 wrote to memory of 4584 3636 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 119 PID 3636 wrote to memory of 4584 3636 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 119 PID 3636 wrote to memory of 4584 3636 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 119 PID 2316 wrote to memory of 5168 2316 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 120 PID 2316 wrote to memory of 5168 2316 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 120 PID 2316 wrote to memory of 5168 2316 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 120 PID 4692 wrote to memory of 5196 4692 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 121 PID 4692 wrote to memory of 5196 4692 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 121 PID 4692 wrote to memory of 5196 4692 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 121 PID 4144 wrote to memory of 5216 4144 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 122 PID 4144 wrote to memory of 5216 4144 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 122 PID 4144 wrote to memory of 5216 4144 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 122 PID 2572 wrote to memory of 5304 2572 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 123 PID 2572 wrote to memory of 5304 2572 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 123 PID 2572 wrote to memory of 5304 2572 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 123 PID 2224 wrote to memory of 5356 2224 91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe 124
Processes
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"1⤵
- Checks computer location settings
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4144 -
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4692 -
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2224 -
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4576 -
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
PID:2980 -
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:5780
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"7⤵PID:6708
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"8⤵PID:15040
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"8⤵PID:20556
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"7⤵PID:8120
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"8⤵PID:16424
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"8⤵PID:10308
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"7⤵PID:10604
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"8⤵PID:20676
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"7⤵PID:14200
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"7⤵PID:19912
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:5856
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"7⤵PID:9128
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"8⤵PID:16780
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"8⤵PID:12088
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"7⤵PID:12104
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"8⤵PID:920
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"7⤵PID:16768
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"7⤵PID:23724
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:5836
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"7⤵PID:13228
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"7⤵PID:18644
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:8024
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"7⤵PID:16984
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"7⤵PID:11756
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:10448
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"7⤵PID:22376
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:13392
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:20184
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:5544
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:6476
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"7⤵PID:12564
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"7⤵PID:17044
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"7⤵PID:24560
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:8160
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"7⤵PID:16356
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"7⤵PID:23608
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:10564
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"7⤵PID:23144
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:14052
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:19532
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:5896
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:9156
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"7⤵PID:16636
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"7⤵PID:11684
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:12120
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"7⤵PID:1480
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:16808
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:24424
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:7108
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:12036
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:18124
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:8016
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:16860
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:23980
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:10628
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:23372
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:14348
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:4196
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:4528 -
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:5644
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:7052
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"7⤵PID:14936
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"7⤵PID:20516
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:8072
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"7⤵PID:15976
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"7⤵PID:22112
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:10540
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"7⤵PID:22576
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:14116
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:19508
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:5880
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:8588
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"7⤵PID:17120
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"7⤵PID:23764
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:11512
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"7⤵PID:384
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:14524
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:20932
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:7164
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:11000
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:18616
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:8064
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:16632
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:24332
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:10508
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:21616
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:4460
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:19996
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:5356
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:6780
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:13020
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:17704
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:25592
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:8096
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:16320
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:21924
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:11128
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:22300
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:14228
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:6112
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:5928
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:9732
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:9884
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:13220
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:17508
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:6772
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:13136
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:17712
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:15608
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:8048
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:16648
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:24540
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:10492
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:22292
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:13364
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:19696
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1112 -
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:3232 -
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:5772
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:6548
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"7⤵PID:12644
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"7⤵PID:17052
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"7⤵PID:18128
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:7944
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"7⤵PID:15992
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"7⤵PID:21728
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:9360
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"7⤵PID:9200
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:13604
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:5284
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:5844
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:9304
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"7⤵PID:16788
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"7⤵PID:16948
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:11708
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"7⤵PID:11392
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:16628
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:11308
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:6664
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:10996
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:18460
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:8056
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:16776
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:18184
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:10472
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:20508
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:14036
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:19988
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:5440
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:6820
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:13492
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:19188
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:8088
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:16408
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:23740
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:11088
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:22360
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:14224
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:20004
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:5920
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:7436
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:16976
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:22084
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:12184
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:14752
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:16844
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:23968
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:7012
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:10044
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:18656
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:7976
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:15824
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:21604
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:10424
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:22352
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:13984
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:19296
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:2860 -
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:5536
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:6868
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:13620
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:5132
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:4328
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:16216
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:10144
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:11248
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:22308
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:14920
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:8432
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:5904
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:11820
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:22428
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:16068
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:15852
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:6676
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:11788
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:18436
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:8008
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:16076
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:23328
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:10620
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:22368
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:14028
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:19972
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"3⤵PID:5196
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:6532
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:11660
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:22392
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:16280
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:21932
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:8176
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:16448
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:23600
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:10572
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:22400
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:14236
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:20192
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"3⤵PID:5952
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:9148
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:16968
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:10816
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:12172
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:3868
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:16868
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:23772
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"3⤵PID:7284
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:12548
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:17036
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:12960
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"3⤵PID:8032
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:14812
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:17024
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"3⤵PID:10464
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:20484
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"3⤵PID:14044
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"3⤵PID:19516
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3636 -
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:5104 -
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2316 -
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:5168
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:6812
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"7⤵PID:13056
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"7⤵PID:17720
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"7⤵PID:19316
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:8152
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"7⤵PID:16344
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"7⤵PID:23716
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:10588
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"7⤵PID:9240
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:14356
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:19904
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:5960
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:9488
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"7⤵PID:16952
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"7⤵PID:24640
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:12928
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:17696
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:2188
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:7256
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:12880
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:17468
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:25388
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:7952
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:15984
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:22272
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:9892
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:9096
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:13972
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:5560
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:1044
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:6700
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:12056
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:4952
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:8168
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:16200
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:23560
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:10580
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:21352
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:14148
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:19540
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:5968
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:8704
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:17112
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:23756
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:12112
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:1924
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:16308
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:23624
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:6848
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:15296
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:20924
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:7992
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:5052
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:16304
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:10432
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:20540
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:13864
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:5280
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:2268 -
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:5460
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:6600
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:12024
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:18452
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:8128
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:16000
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:21736
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:10612
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:20492
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:14340
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:7420
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:5912
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:8136
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:15964
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:21592
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:10532
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:22320
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:4900
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:19688
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:7032
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:12044
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:18444
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:7984
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:15452
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:14424
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:10440
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:20532
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:14000
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:19308
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"3⤵PID:4584
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:6800
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:13628
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:5320
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:8104
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:16416
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:23616
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:10524
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:20576
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:13356
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:20308
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"3⤵PID:5976
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:8488
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:16440
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:23732
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:1224
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:22336
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:14928
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:9828
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"3⤵PID:7036
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:13208
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:18296
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"3⤵PID:8000
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:15940
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:21712
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"3⤵PID:10456
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:20916
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"3⤵PID:14104
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"3⤵PID:19288
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2572 -
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:1260 -
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:5720
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:6920
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:12888
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:17308
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:25060
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:7460
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:13932
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:17264
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:11176
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:23132
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:15208
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:20548
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:5872
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:8480
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:16432
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:24188
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:11368
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"6⤵PID:22344
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:15032
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:20684
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:7156
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:13012
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:17728
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:19336
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:7936
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:15956
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:21704
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:10088
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:5612
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:13504
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:19180
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"3⤵PID:5304
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:6792
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:13992
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:5792
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:8112
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:17060
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:25096
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:10596
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:20524
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:14436
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:17492
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"3⤵PID:5936
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:8712
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:17256
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:23988
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:12096
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:15624
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:15472
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:13000
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"3⤵PID:7004
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:2132
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:17500
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"3⤵PID:7960
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:16288
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:21940
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"3⤵PID:9816
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:8976
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"3⤵PID:13520
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"3⤵PID:18828
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
PID:4680 -
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"3⤵PID:5636
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:6972
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:15216
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:20568
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:8080
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:16852
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:23748
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:10500
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:9268
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:14124
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:19524
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"3⤵PID:5888
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:8696
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:15932
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:15896
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:11576
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"5⤵PID:22384
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:15540
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:21036
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"3⤵PID:7268
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:13236
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:4440
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"3⤵PID:7968
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:16120
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:21916
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"3⤵PID:9784
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:9380
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"3⤵PID:13612
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"3⤵PID:18840
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"2⤵PID:5216
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"3⤵PID:6632
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:13304
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:18652
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"3⤵PID:8144
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:16032
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:21720
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"3⤵PID:10556
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:20500
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"3⤵PID:1872
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"3⤵PID:20012
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"2⤵PID:5944
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"3⤵PID:9740
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"4⤵PID:7484
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"3⤵PID:13296
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"3⤵PID:18468
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"2⤵PID:7276
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"3⤵PID:13144
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"3⤵PID:17740
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"3⤵PID:24592
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"2⤵PID:8040
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"3⤵PID:16884
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"3⤵PID:24340
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"2⤵PID:11096
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"3⤵PID:13428
-
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"2⤵PID:14912
-
-
C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\91e9aacdc9cd30f9121243eaced08480_NeikiAnalytics.exe"2⤵PID:9588
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=3756,i,13879737908471496610,15335851594401413307,262144 --variations-seed-version --mojo-platform-channel-handle=1324 /prefetch:81⤵PID:2428
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\lingerie catfight glans ejaculation .zip.exe
Filesize704KB
MD52d5f21ba6063bf42599caea65221bbd2
SHA19194edf52365c3d466b88c5cdf1e01844dc1d051
SHA2569bc534c1468bb84b9db1971c7886775f7c098d7ef0246b63f88fd885e550a8cb
SHA512051ce264d10d8f799b0f15418c478c7cd2ea7905921cccb4cc357bc8c7bfa24b0c5624344285725fdf16b60edb26990d37c8cf7a10c9f917672bd257a842b510