Analysis
- max time kernel
10s - max time network
148s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system - submitted
07/06/2024, 15:21
Behavioral task
behavioral1
Sample
66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe
Resource
win7-20240221-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
11 signatures
150 seconds
General
- Target 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe
- Size 774KB
- Sample240607-srmwtabc88
- SHA256 cbf1172d71d10185ea75796637235b4f98773648119601e06160fde6becc9968
- MD5 66a4a9c2dff2489bdca689cebdb50b90
- SHA1 4ea05bb8caac3a2b0a9a12d2d6d9a4c54b79db25
- SHA512 3ec5b7c0c9247a761ae88e0178ad97b0833720ba0d58caa04ac0c65dd3c43dc8a8c0e9641969457f54e2fade2acbc70fc38475dbf954501bc14e6398a397feff
- SSDEEP 24576:ggqhsuX0BiWUwUSzGxDKQ/5ii0Ht4LJLZAKh3:7qhsuXGtU7g0Oup0H6LJLLh3
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- Checks computer location settings 2 TTPs 9 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-2804150937-2146708401-419095071-1000\Control Panel\International\Geo\Nation 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2804150937-2146708401-419095071-1000\Control Panel\International\Geo\Nation 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2804150937-2146708401-419095071-1000\Control Panel\International\Geo\Nation 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2804150937-2146708401-419095071-1000\Control Panel\International\Geo\Nation 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2804150937-2146708401-419095071-1000\Control Panel\International\Geo\Nation 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2804150937-2146708401-419095071-1000\Control Panel\International\Geo\Nation 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2804150937-2146708401-419095071-1000\Control Panel\International\Geo\Nation 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2804150937-2146708401-419095071-1000\Control Panel\International\Geo\Nation 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2804150937-2146708401-419095071-1000\Control Panel\International\Geo\Nation 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe - Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
resource yara_rule behavioral2/memory/4796-0-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/files/0x0009000000023437-5.dat upx behavioral2/memory/2176-10-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/3696-151-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2976-183-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4892-184-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2708-185-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2580-186-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4288-187-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4796-188-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/5008-189-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/984-191-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4740-193-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2176-190-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/3696-192-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2064-196-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1632-195-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2736-194-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/3896-198-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2500-197-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4796-199-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4644-201-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2976-200-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/5072-203-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4892-202-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2708-204-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4880-206-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/5104-208-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2580-205-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4288-207-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4672-213-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/5016-212-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/984-211-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4384-210-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/5008-209-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4740-214-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/1632-216-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4964-218-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2064-217-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4152-215-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/400-220-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/3896-219-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/3216-222-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4644-221-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/5072-223-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4920-224-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/2404-225-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/5264-230-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/5252-229-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4336-228-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4792-227-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/5104-233-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/5348-232-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4880-231-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/5392-235-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4384-234-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/5468-238-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/5536-240-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4152-239-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4672-237-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/5016-236-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/4964-241-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/5728-248-0x0000000000400000-0x0000000000420000-memory.dmp upx behavioral2/memory/3216-243-0x0000000000400000-0x0000000000420000-memory.dmp upx - Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe - Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\L: 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File opened (read-only) \??\W: 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File opened (read-only) \??\X: 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File opened (read-only) \??\G: 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File opened (read-only) \??\H: 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File opened (read-only) \??\J: 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File opened (read-only) \??\R: 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File opened (read-only) \??\S: 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File opened (read-only) \??\U: 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File opened (read-only) \??\B: 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File opened (read-only) \??\M: 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File opened (read-only) \??\O: 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File opened (read-only) \??\P: 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File opened (read-only) \??\Q: 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File opened (read-only) \??\V: 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File opened (read-only) \??\Z: 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File opened (read-only) \??\E: 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File opened (read-only) \??\I: 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File opened (read-only) \??\N: 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File opened (read-only) \??\Y: 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File opened (read-only) \??\A: 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File opened (read-only) \??\K: 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File opened (read-only) \??\T: 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe - Drops file in System32 directory 12 IoCs
description ioc Process File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\black horse hardcore girls (Samantha,Sandy).mpg.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\handjob public boobs .avi.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\gay public (Karin).avi.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\asian xxx gang bang licking sweet .avi.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\xxx licking nipples .rar.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\System32\LogFiles\Fax\Incoming\chinese porn catfight blondie .rar.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\russian nude horse girls titts granny (Gina).zip.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\japanese porn sleeping feet YEâPSè& .mpg.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\animal lesbian femdom .zip.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\System32\DriverStore\Temp\canadian horse horse hot (!) .zip.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\beast fucking public .mpg.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\chinese beast cum public balls (Christine,Anniston).mpeg.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe - Drops file in Program Files directory 18 IoCs
description ioc Process File created C:\Program Files (x86)\Google\Temp\german sperm beast hidden latex .avi.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Update\Download\french sperm [free] .avi.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\Download\nude voyeur shoes (Karin).rar.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\Temp\spanish action big femdom .zip.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft SQL Server\130\Shared\handjob [free] boots (Kathrin).mpeg.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft SQL Server\130\Shared\bukkake xxx catfight black hairunshaved (Britney,Tatjana).mpeg.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\Updates\Download\african action action uncut ¼ë .mpeg.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\animal girls ejaculation .zip.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\brasilian horse lesbian YEâPSè& .zip.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\PrintAndShare\gay [free] mistress (Karin).mpeg.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\Microsoft Shared\japanese nude voyeur .zip.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Program Files\Common Files\microsoft shared\chinese fetish masturbation traffic (Sonja,Ashley).mpeg.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Program Files\dotnet\shared\swedish fucking gang bang sleeping mature (Tatjana,Melissa).mpg.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\Templates\danish porn licking circumcision (Anniston).zip.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\asian hardcore voyeur YEâPSè& .mpg.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\chinese beast [bangbus] titts pregnant .rar.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\kicking trambling voyeur mistress .zip.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\gay catfight pregnant (Tatjana,Anniston).mpg.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe - Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_c3d467c525734eb3\british fetish beast masturbation mature (Britney,Janette).avi.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.84_none_81616275259e37fe\blowjob licking traffic .avi.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.1_none_9aa486d790131d4e\beastiality big sm .rar.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_de-de_16bd831fd16633be\gang bang lingerie several models traffic (Liz).mpeg.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..ore-shareexperience_31bf3856ad364e35_10.0.19041.1_none_f42978969c79336a\animal hot (!) ash .avi.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_10.0.19041.1_none_c6da8048542fddc7\beast [free] leather (Kathrin).mpg.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\CbsTemp\black horse hot (!) legs .rar.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor\japanese animal big legs .rar.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\Downloads\gang bang voyeur legs .rar.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\templates\asian beast fetish voyeur (Ashley).mpg.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.UI.ShellCommon\SharePickerUI\british fetish uncut ash sm .avi.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.1_none_a80cea873b2a6772\fucking handjob several models hotel (Liz).mpeg.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_10.0.19041.572_none_cf90e12518baac85\trambling lingerie [free] hole beautyfull .avi.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..nearshareexperience_31bf3856ad364e35_10.0.19041.1_none_0b596e2a33be7d4c\brasilian beastiality big hole bondage (Karin,Sonja).zip.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor\porn animal lesbian (Melissa,Sandy).rar.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.ShellCommon.SharedResources\hardcore catfight (Sonja,Christine).rar.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_en-us_215194e2327a46ac\norwegian lesbian catfight cock (Sandy,Tatjana).avi.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-b..-bcdtemplate-client_31bf3856ad364e35_10.0.19041.1_none_de1581e9a275faf8\malaysia beastiality masturbation boots .mpg.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.746_none_1bbb9ab9fc52bac9\lesbian hidden mistress (Tatjana,Sonja).zip.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.746_none_d01527cffa9c25bc\action beastiality catfight .zip.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\mssrv.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_de-de_881b257d159a5de8\tyrkish fetish action lesbian beautyfull .mpeg.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..se-shared-datafiles_31bf3856ad364e35_10.0.19041.1_none_2f5f00d280dce9f6\lesbian porn girls ash ejaculation .zip.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_it-it_4c5922428a6f2d08\lingerie blowjob voyeur latex (Liz).rar.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-manager-shared_31bf3856ad364e35_10.0.19041.1266_none_7916f7558927ae23\horse action licking (Jade).rar.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\british horse full movie vagina swallow .rar.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_d38ece58f77171b4\sperm [bangbus] .mpeg.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_62312bfbb33d478a\beastiality animal [milf] swallow .mpg.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-h..public-utils-shared_31bf3856ad364e35_10.0.19041.1202_none_d8a1416ab7cccdcf\indian kicking horse girls vagina .rar.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-h..public-utils-shared_31bf3856ad364e35_10.0.19041.1_none_19d22204a1f3fcaf\french porn gang bang full movie (Curtney,Sylvia).mpeg.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor.Resources\japanese handjob full movie .mpg.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Templates\xxx horse catfight sweet (Sandy,Anniston).avi.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost_31bf3856ad364e35_10.0.19041.1202_none_621728fcd3c9d5f6\asian beast lingerie voyeur castration (Sonja,Jade).mpeg.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.1_none_833abdc06c68d338\asian xxx hidden .zip.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor.Resources\tyrkish cum gay masturbation (Anniston,Kathrin).zip.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_de-de_7860bee9439c3ae7\spanish gay uncut bondage .rar.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-composable-sharepicker_31bf3856ad364e35_10.0.19041.1_none_c87e96327faffd0e\indian horse nude lesbian penetration .mpeg.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_it-it_bdb6c49fcea35732\american animal [bangbus] .mpg.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.1_none_5d54c0aac5c3c12c\lingerie sperm several models shoes .mpg.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.844_none_855aff45853749ef\norwegian animal horse catfight YEâPSè& .avi.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ces-ime-eashared-lm_31bf3856ad364e35_10.0.19041.1_none_3d0229d17c310f10\asian lingerie cum girls black hairunshaved (Kathrin,Sarah).avi.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_10.0.19041.1_none_f07d4fae3e8e883f\bukkake beastiality lesbian high heels .mpeg.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.746_none_2212358fc33cc10f\canadian kicking cum [bangbus] .mpg.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..s-ime-eashared-ihds_31bf3856ad364e35_10.0.19041.1_none_e8996b7d3512363f\russian lesbian lesbian .mpg.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_es-es_bf79b5fcc06b3128\danish fetish several models titts .zip.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_10.0.19041.1_none_a7ad1894592cfa12\sperm masturbation (Sandy).avi.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-manager-shared_31bf3856ad364e35_10.0.19041.153_none_e23c926e32d07dc1\asian kicking animal full movie gorgeoushorny .zip.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\italian gay several models 40+ .avi.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\Downloaded Program Files\danish fetish [free] .mpeg.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\InputMethod\SHARED\brasilian lingerie beast [milf] beautyfull .avi.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\SharedFileCache\african nude horse masturbation .avi.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_uk-ua_5b152a8d329397ec\canadian handjob catfight .avi.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_ee7ea14f7d8a3ee3\lesbian beast full movie beautyfull (Samantha,Tatjana).avi.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Templates\italian xxx catfight upskirt .rar.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\british sperm gay voyeur .mpg.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5fdc43acc1be690d\french porn porn [free] (Tatjana).avi.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost_31bf3856ad364e35_10.0.19041.264_none_cb389cf57d74d691\french horse horse girls gorgeoushorny .mpg.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_en-us_bfae5918c0443f83\swedish cum gay several models titts beautyfull (Jenna,Karin).avi.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\assembly\tmp\canadian beast lingerie full movie .zip.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\security\templates\malaysia beast hardcore big .mpg.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\inclusiveOobe\view\templates\brasilian blowjob hidden shoes .rar.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\PLA\Templates\nude action big pregnant (Sonja,Sandy).zip.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.867_en-us_49453482f1fb5356\danish lesbian trambling voyeur .mpg.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-ime-eashared-proxy_31bf3856ad364e35_10.0.19041.1_none_4c786ae2f508e6d5\porn cum [bangbus] hole castration .mpeg.exe 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Suspicious behavior: EnumeratesProcesses 34 IoCs
pid Process 4796 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 4796 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 2176 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 2176 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 4796 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 4796 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 3696 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 3696 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 2736 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 2736 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 4796 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 4796 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 2176 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 2176 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 2500 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 2500 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 2976 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 2976 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 3696 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 4892 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 4892 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 3696 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 4796 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 4796 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 2176 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 2708 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 2176 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 2708 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 2736 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 2736 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 2580 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 2580 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 4288 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 4288 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe - Suspicious use of WriteProcessMemory 48 IoCs
description pid Process procid_target PID 4796 wrote to memory of 2176 4796 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 86 PID 4796 wrote to memory of 2176 4796 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 86 PID 4796 wrote to memory of 2176 4796 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 86 PID 4796 wrote to memory of 3696 4796 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 87 PID 4796 wrote to memory of 3696 4796 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 87 PID 4796 wrote to memory of 3696 4796 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 87 PID 2176 wrote to memory of 2736 2176 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 88 PID 2176 wrote to memory of 2736 2176 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 88 PID 2176 wrote to memory of 2736 2176 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 88 PID 3696 wrote to memory of 2500 3696 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 93 PID 3696 wrote to memory of 2500 3696 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 93 PID 3696 wrote to memory of 2500 3696 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 93 PID 4796 wrote to memory of 2976 4796 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 94 PID 4796 wrote to memory of 2976 4796 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 94 PID 4796 wrote to memory of 2976 4796 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 94 PID 2176 wrote to memory of 4892 2176 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 95 PID 2176 wrote to memory of 4892 2176 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 95 PID 2176 wrote to memory of 4892 2176 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 95 PID 2736 wrote to memory of 2708 2736 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 96 PID 2736 wrote to memory of 2708 2736 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 96 PID 2736 wrote to memory of 2708 2736 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 96 PID 3696 wrote to memory of 2580 3696 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 97 PID 3696 wrote to memory of 2580 3696 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 97 PID 3696 wrote to memory of 2580 3696 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 97 PID 4796 wrote to memory of 4288 4796 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 98 PID 4796 wrote to memory of 4288 4796 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 98 PID 4796 wrote to memory of 4288 4796 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 98 PID 2500 wrote to memory of 5008 2500 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 99 PID 2500 wrote to memory of 5008 2500 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 99 PID 2500 wrote to memory of 5008 2500 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 99 PID 2176 wrote to memory of 984 2176 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 100 PID 2176 wrote to memory of 984 2176 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 100 PID 2176 wrote to memory of 984 2176 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 100 PID 2736 wrote to memory of 4740 2736 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 101 PID 2736 wrote to memory of 4740 2736 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 101 PID 2736 wrote to memory of 4740 2736 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 101 PID 2976 wrote to memory of 1632 2976 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 103 PID 2976 wrote to memory of 1632 2976 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 103 PID 2976 wrote to memory of 1632 2976 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 103 PID 4892 wrote to memory of 2064 4892 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 104 PID 4892 wrote to memory of 2064 4892 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 104 PID 4892 wrote to memory of 2064 4892 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 104 PID 2708 wrote to memory of 3896 2708 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 105 PID 2708 wrote to memory of 3896 2708 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 105 PID 2708 wrote to memory of 3896 2708 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 105 PID 2580 wrote to memory of 4644 2580 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 106 PID 2580 wrote to memory of 4644 2580 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 106 PID 2580 wrote to memory of 4644 2580 66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe 106
Processes
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"1⤵
- Checks computer location settings
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4796 -
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2176 -
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2736 -
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2708 -
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:3896
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:3216
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:6376
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"8⤵PID:10144
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"9⤵PID:1340
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"8⤵PID:14292
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"8⤵PID:4516
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:8236
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"8⤵PID:18396
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"8⤵PID:19356
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:9316
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"8⤵PID:23952
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:15728
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:6340
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:6124
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:9204
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"8⤵PID:1668
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:12996
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:18176
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:23624
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:7808
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:15312
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:22396
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:10800
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:24496
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:15392
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:6516
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:4152
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:6248
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:9844
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"8⤵PID:20608
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:13956
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:20308
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:6844
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:16116
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:9520
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:10764
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:11260
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:15928
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:7296
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:5904
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:8152
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:15892
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:13604
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:10932
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:17656
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:15564
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:9968
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:7400
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:12468
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:19252
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:24660
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:9952
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:21556
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:13924
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:20268
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:4740
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:4920
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:6520
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:10296
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"8⤵PID:21548
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:14092
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:20492
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:8424
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:18168
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:23908
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:11456
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:23692
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:16108
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:2808
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:6100
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:9136
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:3940
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:12580
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:17764
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:24412
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:7792
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:15328
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:22384
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:10736
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:23008
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:14580
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:5648
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:4384
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:6040
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:8636
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:18192
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:17608
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:11932
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:21872
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:16780
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:15800
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:7612
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:15260
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:21912
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:10532
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:1244
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:15204
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:21540
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:5680
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:8880
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:19116
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:12204
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:11128
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:21536
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:16392
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:23804
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:780
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:12608
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:19228
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:25560
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:9432
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:3964
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:12484
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:19236
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:19968
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4892 -
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:2064
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:1320
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:6508
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:10220
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"8⤵PID:5144
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:14032
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:20484
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:6464
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:16948
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:16296
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:10760
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:24468
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:16180
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:22244
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:5344
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:9044
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:20368
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:13188
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:1644
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:24644
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:7816
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:15752
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:2388
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:10664
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:9388
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:15320
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:22372
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:4672
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:6232
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:10136
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:21564
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:13764
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:20276
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:8008
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:16544
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:23320
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:10940
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:24444
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:15576
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:9048
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:5728
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:8180
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:16156
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:13580
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:11244
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:17652
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:15788
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:6868
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:7252
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:12908
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:19536
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:25792
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:9564
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:20080
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:13324
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:19788
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:26452
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵PID:984
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:400
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:6420
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:10212
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:20380
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:4776
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:20532
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:8256
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:15760
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:3692
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:10776
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:18320
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:15824
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:14484
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:6116
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:9196
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:19880
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:26444
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:13220
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:17960
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:24868
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:8000
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:16040
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:1588
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:10916
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:24460
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:15472
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:8124
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵PID:5104
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:6088
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:9168
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:20508
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:12884
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:17804
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:16404
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:7764
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:14976
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:5028
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:10728
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:24436
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:14980
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:4576
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵PID:5612
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:7488
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:15096
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:20392
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:10164
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:21516
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:14020
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:20524
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵PID:7152
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:12080
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:24876
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:17080
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:15484
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵PID:9224
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:4864
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵PID:13180
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵PID:17824
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵PID:24636
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3696 -
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2500 -
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:5008
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:4964
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:6360
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:10128
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"8⤵PID:21524
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:13948
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:20456
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:8220
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:16172
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:14584
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:10600
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:24452
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:15744
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:1336
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:5932
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:9112
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:19996
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:2900
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:12568
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:17756
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:24508
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:7436
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:14884
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:21280
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:10152
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:21508
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:14052
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:20252
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:4336
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:5604
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:7704
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:14424
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:22464
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:10924
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:23280
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:15588
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:9488
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:7112
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:11976
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:25720
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:16940
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:15420
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:8864
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:1596
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:13096
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:18724
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:25216
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:5468
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:6576
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:10484
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:25700
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:16444
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:23812
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:9804
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:3416
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:13932
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:19716
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:6880
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:11944
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:25692
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:16788
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:22732
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:9100
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:20012
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:12408
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:17484
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:24324
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2580 -
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:4644
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:5252
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:6700
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:11728
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"8⤵PID:25028
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:15980
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:22828
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:8780
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:18884
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:21156
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:10256
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:17216
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:24064
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:6628
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:11692
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:11172
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:15628
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:22820
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:8772
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:18748
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:25468
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:12304
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:17244
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:24332
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:5264
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:6712
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:12064
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:25876
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:17032
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:23592
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:8872
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:19768
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:26560
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:10952
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:21868
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:17072
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:15480
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:6636
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:11720
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:21768
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:15988
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:22860
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:8756
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:18908
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:23620
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:12416
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:25908
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:17432
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:24368
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵PID:5072
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:5392
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:6972
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:12440
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:17636
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:14972
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:9424
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:1440
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:12600
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:19204
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:24676
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:6796
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:11712
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:22084
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:15992
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:22868
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:9056
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:20500
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:12312
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:17424
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:24420
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵PID:5348
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:7044
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:11704
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:25800
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:16236
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:23260
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:9188
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:20176
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:12988
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:18116
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:19176
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵PID:6776
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:11684
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:21888
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:14908
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:22812
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵PID:9008
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:19656
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:25868
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵PID:12424
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵PID:17476
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵PID:24340
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2976 -
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵PID:1632
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:2404
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:6384
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:10288
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"7⤵PID:4876
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:4056
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:20564
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:7596
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:16740
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:23392
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:9988
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:17504
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:15720
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:13908
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:5332
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:9128
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:19924
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:4884
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:13204
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:18740
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:25264
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:7800
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:15736
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:2016
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:10792
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:16692
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:15376
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:6496
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵PID:5016
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:6224
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:10092
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:3776
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:13940
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:20284
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:8168
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:14416
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:22456
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:11064
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:11164
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:15652
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:5276
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵PID:5720
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:8840
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:19072
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:25460
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:12296
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:17228
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:24156
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵PID:5556
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:11520
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:25892
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:17064
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:24092
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵PID:9448
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:4140
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵PID:12796
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵PID:19244
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵PID:8916
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
PID:4288 -
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵PID:4880
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:5660
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:8228
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:17612
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:24620
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:10780
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"6⤵PID:24280
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:15780
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:6872
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:6696
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:13480
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:20104
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:9440
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:20516
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:12476
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:19220
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:20588
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵PID:5536
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:7208
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:12788
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:19212
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:25568
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:9580
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:20148
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:13756
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:20260
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵PID:6996
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:12096
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:25900
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:17088
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:23436
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵PID:9152
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:20180
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵PID:12684
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵PID:17792
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵PID:16972
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"2⤵PID:4792
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵PID:5636
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:9016
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:19604
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:26188
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:12332
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:26196
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:17556
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:24428
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵PID:7120
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:12072
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:25884
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:17024
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:16312
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵PID:9160
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:20072
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵PID:13004
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵PID:18184
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵PID:17576
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"2⤵PID:5384
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵PID:6408
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:11984
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"5⤵PID:25916
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:16904
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:15868
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵PID:8856
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:1884
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵PID:13016
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵PID:17728
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵PID:24628
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"2⤵PID:6784
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵PID:11952
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"4⤵PID:7724
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵PID:16812
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵PID:16036
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"2⤵PID:9080
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"3⤵PID:920
-
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"2⤵PID:12400
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"2⤵PID:17440
-
-
C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\66a4a9c2dff2489bdca689cebdb50b90_NeikiAnalytics.exe"2⤵PID:24316
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft SQL Server\130\Shared\handjob [free] boots (Kathrin).mpeg.exe
- Size 750KB
- SHA256 2aa755cbb551fd1b5f940458d171194cad7f3f588e1f7c4b630bb394f0d8a3f8
- MD5 c570a253760c5733e81904183060dd1b
- SHA1 eb61a8373a8cb9aa3808854849d8bce4ed3bdc77
- SHA512 2e4df3fdc59cbaa63f318fdd6e748ebfabf33661bf1f7dab232bb3d6abaf5b95b549ed244db6572b595608cf076390fd4314d54d31b06d9cefd727e36f4d26d5
- SSDEEP 12288:gEQoSeT6tYpWgZ8U+UezwZKxKxHbeiLiNHRfECdaZGbSYiJdSjOM1:g86Ijb+Uo5IHZkxsCQQOI
- MD5 SHA1 SHA512 SSDEEP