Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
13s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
03/06/2024, 06:44
Behavioral task
behavioral1
Sample
9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe
-
Size
1.3MB
-
MD5
9f220256e21a1c85851115f4e4967f00
-
SHA1
22f649d88bb1b6b7c12abcc8496ba5b53cc2e4df
-
SHA256
98a3f6fb935ee4545d7e3a74ac705178d6b4c660d9effdbc81c76de6a58074c6
-
SHA512
e4b37ae7d15a32893037010d09b4d52996f6ac680a7ae8773d716a77b2ca955d92df2e67f65f40d91bad62c441116f896c47f90e6489b0280247eef154b06132
-
SSDEEP
24576:gfp0LV38tvzMFXiiPx3JpqIbLKyXu+5xeOuWXG6xX:op0BstvzEzPx5cI/X/0OZXD
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 16 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-3906287020-2915474608-1755617787-1000\Control Panel\International\Geo\Nation 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3906287020-2915474608-1755617787-1000\Control Panel\International\Geo\Nation 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3906287020-2915474608-1755617787-1000\Control Panel\International\Geo\Nation 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3906287020-2915474608-1755617787-1000\Control Panel\International\Geo\Nation 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3906287020-2915474608-1755617787-1000\Control Panel\International\Geo\Nation 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3906287020-2915474608-1755617787-1000\Control Panel\International\Geo\Nation 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3906287020-2915474608-1755617787-1000\Control Panel\International\Geo\Nation 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3906287020-2915474608-1755617787-1000\Control Panel\International\Geo\Nation 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3906287020-2915474608-1755617787-1000\Control Panel\International\Geo\Nation 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3906287020-2915474608-1755617787-1000\Control Panel\International\Geo\Nation 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3906287020-2915474608-1755617787-1000\Control Panel\International\Geo\Nation 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3906287020-2915474608-1755617787-1000\Control Panel\International\Geo\Nation 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3906287020-2915474608-1755617787-1000\Control Panel\International\Geo\Nation 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3906287020-2915474608-1755617787-1000\Control Panel\International\Geo\Nation 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3906287020-2915474608-1755617787-1000\Control Panel\International\Geo\Nation 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-3906287020-2915474608-1755617787-1000\Control Panel\International\Geo\Nation 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
resource yara_rule behavioral2/memory/3264-0-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/files/0x000800000002343f-5.dat upx behavioral2/memory/1232-25-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2400-159-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4020-165-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/3464-172-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4392-173-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2868-177-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4396-176-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1364-188-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1748-190-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/3264-189-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2144-192-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1232-191-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2400-193-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4316-195-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4020-194-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4328-197-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/3464-196-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1836-200-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1040-201-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4360-204-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/3688-206-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4344-205-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2868-203-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4396-202-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/3264-198-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4392-199-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4636-209-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/508-208-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4012-211-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1748-212-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1364-210-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2144-213-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2976-207-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1504-215-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4808-214-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2808-218-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/3108-217-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4316-216-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4328-219-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4068-220-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1040-225-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/5364-227-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1836-224-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4360-226-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/5332-228-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/6100-233-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/6084-232-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2216-231-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4636-230-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/508-229-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/6124-235-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4012-234-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/208-237-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/6320-244-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1504-243-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/6196-241-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1716-240-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2772-236-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/5224-239-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/5408-238-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/6348-246-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/6416-252-0x0000000000400000-0x0000000000420000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\M: 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File opened (read-only) \??\Q: 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File opened (read-only) \??\T: 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File opened (read-only) \??\U: 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File opened (read-only) \??\W: 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File opened (read-only) \??\Y: 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File opened (read-only) \??\G: 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File opened (read-only) \??\I: 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File opened (read-only) \??\Z: 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File opened (read-only) \??\J: 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File opened (read-only) \??\O: 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File opened (read-only) \??\P: 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File opened (read-only) \??\V: 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File opened (read-only) \??\B: 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File opened (read-only) \??\H: 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File opened (read-only) \??\L: 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File opened (read-only) \??\S: 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File opened (read-only) \??\A: 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File opened (read-only) \??\K: 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File opened (read-only) \??\R: 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File opened (read-only) \??\X: 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File opened (read-only) \??\E: 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File opened (read-only) \??\N: 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe -
Drops file in System32 directory 12 IoCs
description ioc Process File created C:\Windows\SysWOW64\FxsTmp\french blowjob [free] sm .mpg.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\System32\LogFiles\Fax\Incoming\black kicking fucking hot (!) circumcision .mpeg.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\danish horse xxx licking 50+ (Anniston,Liz).zip.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\tyrkish gang bang hardcore girls high heels (Jenna,Karin).rar.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\beast several models black hairunshaved .zip.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\danish fetish gay [free] hole bondage .mpeg.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\russian animal fucking full movie .zip.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\System32\DriverStore\Temp\american kicking beast hot (!) .mpeg.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\tyrkish porn lingerie girls titts .mpg.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\black horse lingerie big (Sylvia).rar.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\brasilian gang bang hardcore girls feet leather .zip.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\sperm hidden (Melissa).mpg.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe -
Drops file in Program Files directory 18 IoCs
description ioc Process File created C:\Program Files (x86)\Common Files\Microsoft Shared\trambling voyeur feet redhair (Janette).mpeg.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Update\Download\indian fetish bukkake lesbian .rar.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\Temp\fucking licking .rar.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Program Files\Common Files\microsoft shared\sperm masturbation 50+ .mpeg.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\xxx girls feet sm (Janette).mpeg.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft SQL Server\130\Shared\tyrkish gang bang xxx voyeur swallow .zip.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\xxx hidden redhair .mpg.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\Download\indian horse gay [milf] titts upskirt .rar.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Program Files\dotnet\shared\fucking big glans .zip.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\hardcore uncut .avi.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\Updates\Download\indian porn lesbian voyeur mistress .rar.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\lingerie girls cock upskirt .mpeg.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\hardcore full movie cock (Sonja,Samantha).zip.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Temp\indian cumshot sperm girls (Samantha).mpeg.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\Templates\indian porn sperm sleeping stockings .zip.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft SQL Server\130\Shared\blowjob [free] shower .avi.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\PrintAndShare\tyrkish porn bukkake hidden penetration .zip.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\american fetish lingerie girls YEâPSè& (Sandy,Sarah).rar.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5fdc43acc1be690d\cum fucking public .zip.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-manager-shared_31bf3856ad364e35_10.0.19041.1266_none_7916f7558927ae23\asian hardcore licking feet femdom (Melissa).mpg.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\Downloads\fucking full movie (Samantha).mpg.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\Downloads\american cum hardcore uncut titts .mpeg.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.746_none_1bbb9ab9fc52bac9\kicking horse girls gorgeoushorny (Jenna,Melissa).rar.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.844_none_57eddd48e7a74274\chinese sperm catfight ejaculation .zip.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.746_none_2212358fc33cc10f\tyrkish porn lingerie public penetration .rar.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.789_en-us_58ebf9ecc407e3c0\african fucking licking titts traffic (Melissa).rar.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.84_none_81616275259e37fe\xxx girls titts beautyfull (Melissa).mpeg.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_10.0.19041.1_none_f07d4fae3e8e883f\kicking horse licking (Janette).zip.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\sperm girls .mpg.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\Downloaded Program Files\japanese fetish hardcore licking hotel .mpg.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\InputMethod\SHARED\tyrkish nude lingerie sleeping pregnant .zip.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor.Resources\lesbian uncut (Sylvia).rar.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_es-es_30d7585a049f5b52\gay uncut femdom .mpg.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..nearshareexperience_31bf3856ad364e35_10.0.19041.1288_none_ca3007304990b2ea\lingerie licking cock .avi.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_10.0.19041.906_none_ef0e010d1381269b\malaysia bukkake hidden glans .rar.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-m..ineshared.resources_31bf3856ad364e35_10.0.19041.1_en-us_99ddc8ce8d3d6dac\norwegian gay several models mature .zip.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.928_none_33e0d5558cdd7c61\danish horse bukkake hot (!) feet shower .zip.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-h..public-utils-shared_31bf3856ad364e35_10.0.19041.1202_none_d8a1416ab7cccdcf\african blowjob big .mpeg.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_d38ece58f77171b4\swedish handjob blowjob full movie hole boots .mpeg.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.844_none_67b5915b5651dd8a\swedish nude blowjob catfight lady .zip.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\mssrv.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\lingerie [bangbus] feet high heels (Samantha).avi.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\black nude blowjob catfight .avi.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Templates\fucking [bangbus] hole girly .rar.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_c3d467c525734eb3\action bukkake uncut pregnant (Sandy,Tatjana).mpg.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.1_none_a80cea873b2a6772\spanish fucking full movie glans .mpeg.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.867_none_c29826784f9429f8\asian trambling several models hole (Sandy,Tatjana).mpeg.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_10.0.19041.1_none_a7ad1894592cfa12\trambling sleeping glans (Christine,Sylvia).mpeg.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_es-es_bf79b5fcc06b3128\blowjob sleeping upskirt .zip.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_10.0.19041.1_none_c6da8048542fddc7\german fucking [milf] .avi.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-ime-eashared-ccshared_31bf3856ad364e35_10.0.19041.1_none_8c0b126c198fcf70\brasilian animal beast lesbian hole penetration (Melissa).rar.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\PLA\Templates\hardcore big .zip.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\japanese gang bang gay [free] glans high heels .mpg.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.UI.ShellCommon\SharePickerUI\gay several models titts .avi.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_es-es_211cf1c632a13851\british trambling big titts swallow .rar.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-ime-eashared-proxy_31bf3856ad364e35_10.0.19041.1_none_4c786ae2f508e6d5\cum horse masturbation swallow (Kathrin,Samantha).zip.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-mccs-engineshared_31bf3856ad364e35_10.0.19041.1_none_abfc9db6c377b91f\black horse lesbian uncut cock femdom (Jade).zip.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-service-shared_31bf3856ad364e35_10.0.19041.1151_none_fbdc4c5f677dc2ec\beastiality sperm hot (!) feet .zip.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..ore-shareexperience_31bf3856ad364e35_10.0.19041.1_none_f42978969c79336a\american beastiality trambling [milf] .zip.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor.Resources\tyrkish horse blowjob lesbian hole .avi.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_en-us_215194e2327a46ac\spanish fucking [milf] .avi.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-composable-sharepicker_31bf3856ad364e35_10.0.19041.1_none_c87e96327faffd0e\asian bukkake licking titts lady .zip.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_uk-ua_5b152a8d329397ec\german bukkake masturbation titts sweet .zip.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost_31bf3856ad364e35_10.0.19041.264_none_cb389cf57d74d691\chinese beast masturbation (Janette).zip.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-h..public-utils-shared_31bf3856ad364e35_10.0.19041.1_none_19d22204a1f3fcaf\beastiality sperm hidden (Liz).zip.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\assembly\tmp\danish gang bang gay girls titts YEâPSè& (Tatjana).mpeg.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_it-it_adfc5e0bfca53431\cum blowjob [free] glans gorgeoushorny .zip.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_it-it_bdb6c49fcea35732\french lingerie uncut cock black hairunshaved .mpeg.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.1_none_2fe79eae2833b9b1\spanish trambling masturbation 50+ (Ashley,Janette).avi.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_10.0.19041.572_none_cf90e12518baac85\kicking horse full movie Ôï (Sonja,Tatjana).rar.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_en-us_bfae5918c0443f83\cum horse licking hole .mpeg.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_de-de_7860bee9439c3ae7\danish animal bukkake lesbian (Jade).rar.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.844_none_855aff45853749ef\spanish lesbian licking glans .avi.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..s-ime-eashared-ihds_31bf3856ad364e35_10.0.19041.1_none_e8996b7d3512363f\beast lesbian titts granny (Samantha).mpg.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..se-shared-datafiles_31bf3856ad364e35_10.0.19041.1_none_2f5f00d280dce9f6\malaysia fucking hidden feet wifey (Samantha).rar.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_de-de_16bd831fd16633be\malaysia fucking several models (Melissa).avi.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\CbsTemp\canadian lesbian [free] cock ejaculation (Tatjana).mpg.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\inclusiveOobe\view\templates\lingerie sleeping (Jade).mpg.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.1_none_f3b35d713ce0fc7f\sperm several models hole girly (Jade).zip.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_62312bfbb33d478a\horse big titts stockings .zip.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_ee7ea14f7d8a3ee3\tyrkish handjob lingerie [free] black hairunshaved .zip.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-service-shared_31bf3856ad364e35_10.0.19041.1_none_3cfd44d351b1a8ab\swedish horse hardcore hidden young .avi.exe 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3264 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 3264 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 1232 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 1232 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 3264 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 3264 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 2400 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 2400 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 4020 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 4020 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 1232 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 1232 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 3264 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 3264 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 3464 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 3464 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 4392 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 4392 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 1232 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 1232 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 4396 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 4396 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 3264 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 3264 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 2868 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 2868 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 2400 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 2400 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 4020 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 4020 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 2976 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 2976 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 4344 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 4344 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 1364 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 1364 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 1232 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 1232 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 3464 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 3464 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 3264 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 3264 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 1748 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 1748 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 2144 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 2144 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 4020 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 4020 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 4808 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 4808 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 2400 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 2400 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 4316 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 4316 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 4392 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 4392 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 2868 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 2868 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 4328 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 4328 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 4396 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 4396 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 1836 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 1836 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 3264 wrote to memory of 1232 3264 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 89 PID 3264 wrote to memory of 1232 3264 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 89 PID 3264 wrote to memory of 1232 3264 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 89 PID 1232 wrote to memory of 2400 1232 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 92 PID 1232 wrote to memory of 2400 1232 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 92 PID 1232 wrote to memory of 2400 1232 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 92 PID 3264 wrote to memory of 4020 3264 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 93 PID 3264 wrote to memory of 4020 3264 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 93 PID 3264 wrote to memory of 4020 3264 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 93 PID 1232 wrote to memory of 3464 1232 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 96 PID 1232 wrote to memory of 3464 1232 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 96 PID 1232 wrote to memory of 3464 1232 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 96 PID 3264 wrote to memory of 4392 3264 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 97 PID 3264 wrote to memory of 4392 3264 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 97 PID 3264 wrote to memory of 4392 3264 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 97 PID 2400 wrote to memory of 4396 2400 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 98 PID 2400 wrote to memory of 4396 2400 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 98 PID 2400 wrote to memory of 4396 2400 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 98 PID 4020 wrote to memory of 2868 4020 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 99 PID 4020 wrote to memory of 2868 4020 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 99 PID 4020 wrote to memory of 2868 4020 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 99 PID 1232 wrote to memory of 4344 1232 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 101 PID 1232 wrote to memory of 4344 1232 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 101 PID 1232 wrote to memory of 4344 1232 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 101 PID 3464 wrote to memory of 2976 3464 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 102 PID 3464 wrote to memory of 2976 3464 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 102 PID 3464 wrote to memory of 2976 3464 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 102 PID 3264 wrote to memory of 1364 3264 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 103 PID 3264 wrote to memory of 1364 3264 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 103 PID 3264 wrote to memory of 1364 3264 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 103 PID 4020 wrote to memory of 1748 4020 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 104 PID 4020 wrote to memory of 1748 4020 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 104 PID 4020 wrote to memory of 1748 4020 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 104 PID 2400 wrote to memory of 2144 2400 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 105 PID 2400 wrote to memory of 2144 2400 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 105 PID 2400 wrote to memory of 2144 2400 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 105 PID 4392 wrote to memory of 4808 4392 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 106 PID 4392 wrote to memory of 4808 4392 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 106 PID 4392 wrote to memory of 4808 4392 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 106 PID 2868 wrote to memory of 4316 2868 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 107 PID 2868 wrote to memory of 4316 2868 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 107 PID 2868 wrote to memory of 4316 2868 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 107 PID 4396 wrote to memory of 4328 4396 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 108 PID 4396 wrote to memory of 4328 4396 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 108 PID 4396 wrote to memory of 4328 4396 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 108 PID 1232 wrote to memory of 1836 1232 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 109 PID 1232 wrote to memory of 1836 1232 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 109 PID 1232 wrote to memory of 1836 1232 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 109 PID 3464 wrote to memory of 1040 3464 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 110 PID 3464 wrote to memory of 1040 3464 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 110 PID 3464 wrote to memory of 1040 3464 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 110 PID 3264 wrote to memory of 4360 3264 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 111 PID 3264 wrote to memory of 4360 3264 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 111 PID 3264 wrote to memory of 4360 3264 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 111 PID 2976 wrote to memory of 3688 2976 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 112 PID 2976 wrote to memory of 3688 2976 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 112 PID 2976 wrote to memory of 3688 2976 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 112 PID 4344 wrote to memory of 508 4344 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 113 PID 4344 wrote to memory of 508 4344 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 113 PID 4344 wrote to memory of 508 4344 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 113 PID 1364 wrote to memory of 4636 1364 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 114 PID 1364 wrote to memory of 4636 1364 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 114 PID 1364 wrote to memory of 4636 1364 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 114 PID 4020 wrote to memory of 2216 4020 9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe 115
Processes
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"1⤵
- Checks computer location settings
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3264 -
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1232 -
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2400 -
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4396 -
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4328 -
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:3108
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:6328
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"8⤵PID:10112
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"9⤵PID:14340
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"9⤵PID:20940
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"8⤵PID:13452
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"8⤵PID:5600
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:7588
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"8⤵PID:14788
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"8⤵PID:1196
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:10412
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"8⤵PID:9752
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:13340
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:14144
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:5244
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:9452
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"8⤵PID:15280
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"8⤵PID:1656
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:13548
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:6844
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:6664
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:11896
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:13148
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:14284
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:8948
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:3640
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:13556
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:6860
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:1716
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:6416
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:11140
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"8⤵PID:16588
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"9⤵PID:20696
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"8⤵PID:1452
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:10360
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:12440
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:7932
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:15532
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:19380
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:10760
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:5980
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:20260
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:13032
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:2468
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:5284
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:9792
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:20712
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:13492
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:392
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:6744
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:11816
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:13052
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:14460
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:2192
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:8400
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:12200
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:21208
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:11544
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:13244
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:9028
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:2144 -
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:1504
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:6124
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:8516
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"8⤵PID:12864
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:13564
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:6840
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:6452
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:13388
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:6504
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:9932
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:6092
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:13476
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:6412
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:5268
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:9444
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:14604
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:4428
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:13604
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:19412
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:6736
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:11840
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:13140
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:11000
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:8408
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:12228
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:11792
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:13196
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:9268
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:4012
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:6084
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:9288
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:10280
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:13540
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:10048
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:6648
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:11856
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:13060
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:14468
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:3408
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:8364
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:14408
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:3948
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:11604
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:13220
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:5496
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:5308
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:10068
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:14620
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:21400
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:13460
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:6480
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:6680
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:11596
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:13276
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:12744
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:8620
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:6300
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:11972
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:13180
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:11052
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3464 -
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2976 -
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:3688
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:6196
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:10132
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"8⤵PID:904
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:13372
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:14116
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:7980
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:15500
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:4536
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:10520
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:14576
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:8796
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:13316
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:10172
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:5340
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:6832
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:11880
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:13780
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:19416
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:8972
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:11436
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:13580
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:5464
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:6720
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:11832
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:13172
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:2864
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:8596
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:12196
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:3028
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:11588
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:13076
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:10856
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:1040
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:6164
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:9400
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:14404
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:9020
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:13588
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:6264
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:7596
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:14764
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:1056
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:10404
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:19928
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:13044
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:13976
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:1976
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:5364
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:6824
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:11920
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:13116
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:6180
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:8956
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:8384
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:13804
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:6204
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:6768
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:11980
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:13108
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:11252
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:8436
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:9664
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:20244
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:11536
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:13252
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:12836
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4344 -
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:508
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:5408
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:10120
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:7172
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:21100
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:13444
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:10340
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:7476
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:14852
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:9128
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:9360
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:20704
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:13404
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:4748
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:5332
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:9884
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:17484
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:13596
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:6456
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:6640
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:11336
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:13292
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:6356
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:8348
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:20688
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:11480
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:13268
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:6248
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"3⤵
- Suspicious behavior: EnumeratesProcesses
PID:1836 -
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:6172
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:11240
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:13300
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:216
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:7516
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:14844
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:3872
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:9352
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:10040
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:13364
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:5480
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"3⤵PID:5356
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:9428
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:5028
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:1804
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:13524
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:2632
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"3⤵PID:6760
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:11872
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:13092
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:16472
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:2924
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"3⤵PID:8356
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:20720
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"3⤵PID:11612
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"3⤵PID:13212
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"3⤵PID:14312
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4020 -
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2868 -
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4316 -
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:4068
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:6100
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:9804
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"8⤵PID:14264
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"8⤵PID:2276
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:13572
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:812
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:6752
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:11888
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:13100
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:10596
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:8936
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:9324
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:13824
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:14220
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:5228
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:9600
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:6892
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:21120
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:13436
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:6468
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:6776
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:11912
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:13132
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:14328
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:8928
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:12972
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:13812
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:5780
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:208
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:6496
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:10772
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:15448
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:24608
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:900
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:1784
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:7924
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:14772
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:5680
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:10740
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:4400
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:3816
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:11428
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:5620
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:5292
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:8472
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:14348
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:664
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:13532
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:10148
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:6696
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:11800
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:13188
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:14176
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:8444
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:3972
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:20776
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:11576
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:13260
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:5236
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:1748 -
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:2808
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:6320
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:11212
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:13308
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:2972
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:7604
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:15848
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:5124
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:10420
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:7092
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:4848
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:13332
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:14436
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:5260
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:9136
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:3232
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:13428
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:5376
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:6672
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:11344
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:13284
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:8292
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:8964
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:6304
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:14212
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:5416
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"3⤵PID:2216
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:6460
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:10372
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:1652
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:996
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:7792
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:15508
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:2232
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:10232
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:15444
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:22776
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:13356
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:14160
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"3⤵PID:5316
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:9420
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:19776
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:13508
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:19404
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"3⤵PID:6688
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:11864
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:13788
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:5412
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"3⤵PID:8388
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:14492
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"3⤵PID:11560
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"3⤵PID:13084
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"3⤵PID:10752
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4392 -
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4808 -
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:1624
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:5256
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:9388
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"7⤵PID:21992
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:13796
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:14248
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:7504
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:14836
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:4616
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:9484
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:6096
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:13348
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:7020
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:5276
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:9280
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:11216
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:13500
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:5752
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:6656
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:11848
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:13068
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:16668
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:5072
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:8372
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:12616
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:11620
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:13204
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:12860
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"3⤵PID:2772
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:6152
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:10104
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:10664
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:13412
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:6820
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:7552
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:14796
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:5616
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:10460
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:14636
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:21572
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:13324
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:14112
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"3⤵PID:5300
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:9224
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:10480
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:13484
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:6472
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"3⤵PID:6728
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:11904
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:13156
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:9996
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"3⤵PID:8416
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:11952
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:3192
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"3⤵PID:11552
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"3⤵PID:13228
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"3⤵PID:3964
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1364 -
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"3⤵PID:4636
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:6348
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:9652
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"6⤵PID:4244
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:13380
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:14704
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:7764
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:15516
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:1588
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:10780
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:4992
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:20264
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:3988
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:1492
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"3⤵PID:5324
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:10160
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:7036
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:21128
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:13420
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:6584
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"3⤵PID:6712
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:11808
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:13164
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:10872
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"3⤵PID:8492
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:12244
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:3936
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"3⤵PID:11568
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"3⤵PID:13236
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"3⤵PID:12404
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"2⤵PID:4360
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"3⤵PID:5224
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:10056
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"5⤵PID:11772
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:13464
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:5584
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"3⤵PID:7496
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:14780
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:5148
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"3⤵PID:9644
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:8708
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"3⤵PID:13396
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"3⤵PID:5776
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"2⤵PID:5348
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"3⤵PID:9436
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:14376
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"4⤵PID:10952
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"3⤵PID:13516
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"3⤵PID:5552
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"2⤵PID:6704
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"3⤵PID:11824
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"3⤵PID:13124
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"3⤵PID:952
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"2⤵PID:8456
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"3⤵PID:7096
-
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"2⤵PID:13900
-
-
C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9f220256e21a1c85851115f4e4967f00_NeikiAnalytics.exe"2⤵PID:5676
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\xxx girls feet sm (Janette).mpeg.exe
Filesize1.2MB
MD5767e2fbf76a8a70ee2db7033b14d7cf0
SHA1a25b3522ca014c13f01d0f2ba56650781392006d
SHA2562492dc7676fbe7f3994d5e3b72ce1929d3ff57f92b713deea71ec69970946c81
SHA5120b56518042cc05aadf04a9178448fb582705137b6c2ca5bba8c43cf998471af10c4485a01f7b80e65d9b93df1563a9f02b433f460e4af385e148ff1387c52fed
-
Filesize
146B
MD531ec9561a1ae0c1bfa8238eb6e3b4c81
SHA1d0423627dcc77b093751c1f796fdf83c13a9957f
SHA256d2ec0bcba08e9d3418f2050f303953d7c1cdfe80972eac3a030634e6f7863082
SHA5128f351615443a8a24b7ebb2de3d6ca84f92907ddf04865bd401d2163a43ea590f58438c1f282348a312d48849e28620764dfe68ec93ac99b96faff4fbc0811516