Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
15s -
max time network
141s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system -
submitted
24/06/2024, 17:50
Static task
static1
Behavioral task
behavioral1
Sample
978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
General
-
Target
978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe
-
Size
878KB
-
MD5
38670ef6adf4f6a4624878df4c84dfc0
-
SHA1
ccd12c81fb44463368e39f1beac3584f494a95e8
-
SHA256
978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65
-
SHA512
51995893f846568bc2cd832019703652cf061e071875d32d66b74fd617ceebd042614d0f41536ceb1765f70f0c5e9840bb61657415e03328ea54e69171fcddf2
-
SSDEEP
24576:sWTX+9g1oNBgDLl24lQAYgCfJneVVcj7Vd04YE2AQRttb:BbegIgDA7AOfJnec7Vy4b2AQntb
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 16 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-4204450073-1267028356-951339405-1000\Control Panel\International\Geo\Nation 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\V: 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File opened (read-only) \??\Y: 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File opened (read-only) \??\S: 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File opened (read-only) \??\U: 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File opened (read-only) \??\J: 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File opened (read-only) \??\W: 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File opened (read-only) \??\X: 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File opened (read-only) \??\A: 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File opened (read-only) \??\B: 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File opened (read-only) \??\K: 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File opened (read-only) \??\L: 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File opened (read-only) \??\O: 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File opened (read-only) \??\T: 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File opened (read-only) \??\E: 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File opened (read-only) \??\G: 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File opened (read-only) \??\M: 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File opened (read-only) \??\N: 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File opened (read-only) \??\P: 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File opened (read-only) \??\Q: 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File opened (read-only) \??\R: 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File opened (read-only) \??\Z: 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File opened (read-only) \??\H: 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File opened (read-only) \??\I: 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe -
Drops file in System32 directory 12 IoCs
description ioc Process File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\indian sperm xxx [bangbus] legs gorgeoushorny (Kathrin,Anniston).mpeg.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\System32\DriverStore\Temp\kicking hidden .rar.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\malaysia sperm kicking sleeping (Janette).mpeg.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\indian beastiality kicking lesbian balls (Melissa).mpeg.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\horse gang bang sleeping shower (Jade,Karin).mpg.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\blowjob animal hidden young (Gina,Anniston).avi.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\spanish nude gay licking ash (Sylvia).zip.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\fetish animal several models 50+ (Kathrin,Christine).rar.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\black handjob several models .zip.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\african kicking several models sm .avi.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\danish sperm uncut ¼ë .mpg.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\System32\LogFiles\Fax\Incoming\asian bukkake lesbian hidden mature .mpeg.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe -
Drops file in Program Files directory 19 IoCs
description ioc Process File created C:\Program Files\Microsoft Office\Updates\Download\norwegian lingerie sleeping hole .mpg.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\chinese fucking girls wifey .rar.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\Download\asian bukkake masturbation hole leather .mpg.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\canadian cum sperm masturbation circumcision .rar.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Program Files\Common Files\microsoft shared\american beast girls legs latex .mpeg.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Program Files\dotnet\shared\norwegian porn handjob sleeping .zip.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft SQL Server\130\Shared\british action horse full movie cock leather .rar.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Temp\hardcore uncut .avi.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Update\Download\malaysia handjob sleeping nipples beautyfull .rar.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\Install\{F0237BE9-D6E4-4703-93AC-27360BF5E970}\EDGEMITMP_1D2FD.tmp\african gay animal sleeping shoes .mpeg.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\Templates\malaysia horse public nipples (Anniston).mpeg.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\russian gay beast voyeur (Anniston).rar.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft SQL Server\130\Shared\nude voyeur young (Sonja,Jade).avi.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\russian kicking xxx [milf] .avi.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\Microsoft Shared\porn sperm catfight sweet .zip.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\Temp\african cum sleeping girly .mpeg.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\horse [milf] beautyfull .rar.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\PrintAndShare\kicking xxx hidden .zip.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\indian fetish licking young .zip.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5021dd18efc0460c\japanese trambling [bangbus] 40+ .rar.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-b..-bcdtemplate-client_31bf3856ad364e35_10.0.19041.1_none_de1581e9a275faf8\french bukkake public .zip.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.844_none_67b5915b5651dd8a\chinese gay hidden gorgeoushorny .mpg.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.746_none_1bbb9ab9fc52bac9\gay gay full movie (Samantha,Sylvia).mpg.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-ime-eashared-ccshared_31bf3856ad364e35_10.0.19041.1_none_8c0b126c198fcf70\kicking catfight cock .rar.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.UI.ShellCommon\SharePickerUI\tyrkish bukkake cum licking .rar.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-ime-eashared-proxy_31bf3856ad364e35_10.0.19041.1_none_4c786ae2f508e6d5\spanish porn [free] .zip.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..s-ime-eashared-ihds_31bf3856ad364e35_10.0.19041.1_none_e8996b7d3512363f\brasilian xxx fucking several models boobs shower .mpg.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-h..public-utils-shared_31bf3856ad364e35_10.0.19041.1202_none_d8a1416ab7cccdcf\fucking blowjob big glans granny .mpg.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..nearshareexperience_31bf3856ad364e35_10.0.19041.1288_none_ca3007304990b2ea\tyrkish trambling girls (Sylvia,Britney).rar.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\templates\asian cum sleeping 40+ .mpg.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\security\templates\cum [bangbus] lady (Britney).rar.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_it-it_bdb6c49fcea35732\american gang bang xxx uncut upskirt .mpg.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.1_none_9aa486d790131d4e\nude voyeur .avi.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared_31bf3856ad364e35_10.0.19041.1_none_bd731e5b85dd203e\italian handjob licking girly (Melissa,Sandy).avi.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\assembly\tmp\kicking blowjob full movie (Jade,Sylvia).rar.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_887b2378b7b5651d\african hardcore lingerie [bangbus] mistress (Jenna,Liz).rar.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_es-es_211cf1c632a13851\american nude [milf] ejaculation .zip.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.844_none_855aff45853749ef\german blowjob big 50+ (Anniston,Jenna).rar.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-m..ineshared.resources_31bf3856ad364e35_10.0.19041.1_en-us_99ddc8ce8d3d6dac\canadian kicking cumshot hot (!) glans swallow .zip.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_es-es_5abbd3c4a3f2014c\american horse [free] .zip.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\blowjob trambling big hole .mpg.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_it-it_adfc5e0bfca53431\animal masturbation glans (Melissa,Gina).avi.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.1_none_a80cea873b2a6772\asian beast beastiality big pregnant .rar.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.867_none_c29826784f9429f8\action animal hot (!) pregnant .avi.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor.Resources\danish horse catfight leather .mpeg.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_it-it_4c5922428a6f2d08\horse catfight latex (Tatjana).mpeg.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-hvsi-service-shared_31bf3856ad364e35_10.0.19041.1151_none_fbdc4c5f677dc2ec\spanish bukkake full movie titts high heels (Kathrin).mpg.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..ore-shareexperience_31bf3856ad364e35_10.0.19041.964_none_1c1a193f5bfcf136\danish cumshot fucking girls nipples .zip.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_14c898cc82025c76\french lesbian lesbian stockings .zip.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_d38ece58f77171b4\blowjob blowjob girls (Sandy).avi.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\kicking sleeping 40+ (Kathrin,Gina).zip.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Templates\indian action public granny .rar.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_it-it_e79b400a6df5fd2c\spanish animal public hotel (Jade).avi.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\inclusiveOobe\view\templates\beast beast big swallow .rar.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.1_none_0bc0f3d4cd7dc8fd\italian nude animal lesbian .zip.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.1_none_5d54c0aac5c3c12c\gang bang cum uncut wifey (Samantha,Tatjana).rar.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.1_none_fa09f84703cb02c5\tyrkish trambling [milf] nipples castration (Sandy).rar.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_62312bfbb33d478a\norwegian sperm trambling big girly .zip.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_ee7ea14f7d8a3ee3\animal lesbian catfight fishy (Ashley,Samantha).mpeg.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\PLA\Templates\cum public bondage .mpeg.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.867_en-us_49453482f1fb5356\black xxx lesbian .mpeg.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.1_none_833abdc06c68d338\chinese handjob fucking uncut legs .avi.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\Downloads\fetish porn full movie stockings (Christine).zip.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5fdc43acc1be690d\fetish horse hidden (Sonja).mpg.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost_31bf3856ad364e35_10.0.19041.1202_none_621728fcd3c9d5f6\french sperm masturbation nipples .rar.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_en-us_bfae5918c0443f83\japanese beast sleeping upskirt .avi.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_es-es_bf79b5fcc06b3128\swedish cumshot fetish masturbation pregnant .mpeg.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..ore-shareexperience_31bf3856ad364e35_10.0.19041.1_none_f42978969c79336a\hardcore gay public granny (Curtney).avi.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\Downloads\cumshot lesbian gorgeoushorny .avi.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_de-de_881b257d159a5de8\lesbian porn licking blondie .mpg.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_de-de_b1ffa0e7b4ed03e2\american beast big (Sandy,Karin).mpeg.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\SharedFileCache\norwegian handjob horse lesbian hairy (Gina,Melissa).mpeg.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_de-de_16bd831fd16633be\gang bang public (Jenna,Gina).rar.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_10.0.19041.572_none_cf90e12518baac85\xxx hardcore hot (!) traffic .rar.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_10.0.19041.1_it-it_72a319bf8ee74a9b\russian gay action several models pregnant .avi.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_es-es_30d7585a049f5b52\cumshot lesbian masturbation bondage (Sylvia,Jenna).rar.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-p2p-pnrp-adm.resources_31bf3856ad364e35_10.0.19041.1_de-de_3d077a9cd5de5151\malaysia horse hidden legs (Sarah,Tatjana).mpeg.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.746_none_ab42fb092bda9182\tyrkish hardcore hot (!) cock gorgeoushorny .avi.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.746_none_d01527cffa9c25bc\indian kicking several models balls .rar.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-mccs-engineshared_31bf3856ad364e35_10.0.19041.1_none_abfc9db6c377b91f\swedish beast lesbian titts .mpeg.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-composable-sharepicker_31bf3856ad364e35_10.0.19041.1_none_c87e96327faffd0e\xxx [free] hole bondage (Janette).rar.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.ShellCommon.SharedResources\fetish beast several models nipples .rar.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-h..public-utils-shared_31bf3856ad364e35_10.0.19041.1_none_19d22204a1f3fcaf\porn action [free] .avi.exe 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Program crash 1 IoCs
pid pid_target Process procid_target 23360 2916 WerFault.exe 82 -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2916 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 2916 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 3024 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 3024 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 2916 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 2916 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 2444 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 2444 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 924 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 924 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 3024 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 3024 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 2916 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 2916 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 3916 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 3916 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 1880 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 1880 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 2444 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 2444 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 1604 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 1604 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 3024 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 3024 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 2760 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 2760 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 2916 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 2916 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 924 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 924 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 3944 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 3944 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 4376 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 4376 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 3024 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 2444 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 3024 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 2444 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 4780 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 4780 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 3916 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 3916 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 4760 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 4760 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 2916 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 2916 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 4400 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 4400 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 1856 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 1856 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 644 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 644 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 924 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 1604 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 1604 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 924 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 1880 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 1880 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 400 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 400 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 2760 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 2760 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 888 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 888 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 2916 wrote to memory of 3024 2916 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 86 PID 2916 wrote to memory of 3024 2916 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 86 PID 2916 wrote to memory of 3024 2916 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 86 PID 3024 wrote to memory of 2444 3024 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 87 PID 3024 wrote to memory of 2444 3024 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 87 PID 3024 wrote to memory of 2444 3024 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 87 PID 2916 wrote to memory of 924 2916 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 88 PID 2916 wrote to memory of 924 2916 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 88 PID 2916 wrote to memory of 924 2916 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 88 PID 2444 wrote to memory of 3916 2444 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 93 PID 2444 wrote to memory of 3916 2444 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 93 PID 2444 wrote to memory of 3916 2444 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 93 PID 3024 wrote to memory of 1880 3024 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 94 PID 3024 wrote to memory of 1880 3024 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 94 PID 3024 wrote to memory of 1880 3024 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 94 PID 2916 wrote to memory of 1604 2916 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 95 PID 2916 wrote to memory of 1604 2916 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 95 PID 2916 wrote to memory of 1604 2916 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 95 PID 924 wrote to memory of 2760 924 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 96 PID 924 wrote to memory of 2760 924 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 96 PID 924 wrote to memory of 2760 924 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 96 PID 2444 wrote to memory of 3944 2444 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 98 PID 2444 wrote to memory of 3944 2444 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 98 PID 2444 wrote to memory of 3944 2444 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 98 PID 3024 wrote to memory of 4376 3024 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 99 PID 3024 wrote to memory of 4376 3024 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 99 PID 3024 wrote to memory of 4376 3024 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 99 PID 3916 wrote to memory of 4780 3916 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 100 PID 3916 wrote to memory of 4780 3916 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 100 PID 3916 wrote to memory of 4780 3916 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 100 PID 2916 wrote to memory of 4760 2916 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 101 PID 2916 wrote to memory of 4760 2916 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 101 PID 2916 wrote to memory of 4760 2916 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 101 PID 924 wrote to memory of 644 924 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 102 PID 924 wrote to memory of 644 924 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 102 PID 924 wrote to memory of 644 924 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 102 PID 1604 wrote to memory of 1856 1604 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 103 PID 1604 wrote to memory of 1856 1604 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 103 PID 1604 wrote to memory of 1856 1604 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 103 PID 1880 wrote to memory of 4400 1880 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 104 PID 1880 wrote to memory of 4400 1880 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 104 PID 1880 wrote to memory of 4400 1880 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 104 PID 2760 wrote to memory of 400 2760 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 105 PID 2760 wrote to memory of 400 2760 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 105 PID 2760 wrote to memory of 400 2760 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 105 PID 2444 wrote to memory of 888 2444 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 106 PID 2444 wrote to memory of 888 2444 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 106 PID 2444 wrote to memory of 888 2444 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 106 PID 3024 wrote to memory of 2004 3024 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 107 PID 3024 wrote to memory of 2004 3024 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 107 PID 3024 wrote to memory of 2004 3024 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 107 PID 3916 wrote to memory of 3588 3916 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 108 PID 3916 wrote to memory of 3588 3916 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 108 PID 3916 wrote to memory of 3588 3916 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 108 PID 3944 wrote to memory of 4316 3944 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 109 PID 3944 wrote to memory of 4316 3944 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 109 PID 3944 wrote to memory of 4316 3944 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 109 PID 2916 wrote to memory of 1556 2916 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 110 PID 2916 wrote to memory of 1556 2916 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 110 PID 2916 wrote to memory of 1556 2916 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 110 PID 1604 wrote to memory of 232 1604 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 111 PID 1604 wrote to memory of 232 1604 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 111 PID 1604 wrote to memory of 232 1604 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 111 PID 1880 wrote to memory of 4596 1880 978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe 112
Processes
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"1⤵
- Checks computer location settings
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2916 -
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3024 -
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2444 -
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3916 -
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4780 -
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:2244
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:6216
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"8⤵PID:9416
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"9⤵PID:16696
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"8⤵PID:12680
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"8⤵PID:14724
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"8⤵PID:20188
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:7528
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"8⤵PID:15172
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"8⤵PID:20680
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:10012
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"8⤵PID:10328
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:15284
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:20252
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:5260
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:8544
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"8⤵PID:10332
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:11988
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"8⤵PID:3604
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:14860
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:19140
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:6524
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:11456
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"8⤵PID:9900
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:14956
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:19252
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:8560
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:13068
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:12004
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:24136
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:14836
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:20392
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:3588
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:6040
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:9320
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"8⤵PID:10180
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:12796
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:14648
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:19260
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:7364
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:15180
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:20384
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:9960
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:16000
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:15268
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:19268
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:5316
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:8704
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:13264
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:12264
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:14796
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:20408
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:7460
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:15156
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:21928
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:9984
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:4060
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:15236
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:20360
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3944 -
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:4316
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:6232
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:9220
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"8⤵PID:24148
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:12656
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:14696
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:21804
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:7664
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:16056
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:20376
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:10404
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:17180
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:15108
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:21944
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:5308
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:8552
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:9836
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:11980
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:13268
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:14852
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:20416
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:7140
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:15204
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:19820
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:9748
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:12572
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:13120
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:14624
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:20996
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:888 -
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:5996
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:8696
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:18828
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:12180
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:20692
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:14812
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:20464
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:7224
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:15076
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:20176
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:9860
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:24080
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:13240
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:14584
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:21012
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:5332
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:9232
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:12256
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:12648
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:19560
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:14704
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:20328
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:7620
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:16088
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:19892
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:10004
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:16176
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:15276
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:19916
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1880 -
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4400 -
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:4244
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:6048
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:9560
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"8⤵PID:10040
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:13004
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:14576
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:3152
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:7372
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:15116
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:21052
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:9944
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:24104
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:13352
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:14600
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:20344
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:5244
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:8416
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:16064
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:21920
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:11300
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:4432
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:14964
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:19204
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:6556
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:11620
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:9048
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:14940
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:20432
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:8688
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:12980
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:12172
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:19636
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:14820
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:23464
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:4596
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:6408
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:9304
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:16652
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:12672
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:14716
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:20988
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:8040
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:16104
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:21060
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:10896
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:11664
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:15004
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:19876
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:5276
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:7672
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:16112
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:19108
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:10120
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:9820
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:15220
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:21744
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:6532
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:11676
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:14924
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:20440
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:8580
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:15960
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:12164
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:13184
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:14828
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:21044
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4376 -
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:3780
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:6204
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:9372
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:12044
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:12580
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:14740
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:21736
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:7644
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:14560
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:19116
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:9968
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:9024
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:15252
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:19812
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:5268
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:7928
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:16072
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:19828
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:10396
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:8528
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:15068
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:20296
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:6540
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:11744
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:20132
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:14900
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:19172
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:8616
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:12344
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:11972
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:23488
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:14844
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:20336
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"3⤵PID:2004
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:6020
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:8728
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:13256
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:2812
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:14788
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:20448
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:7572
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:15028
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:19788
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:10032
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:8932
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:15244
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:19180
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"3⤵PID:5324
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:9552
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:12272
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:12988
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:14680
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:19328
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"3⤵PID:7612
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:15052
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:21004
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"3⤵PID:10104
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:9868
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"3⤵PID:15212
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"3⤵PID:19220
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:924 -
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2760 -
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:400 -
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:5072
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:6028
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:9308
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"8⤵PID:9956
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:12628
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:14536
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:18956
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:7680
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:15140
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:19312
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:10128
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:16792
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:15228
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:21812
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:5228
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:7980
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:16080
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:20368
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:10616
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:23568
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:15020
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:23472
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:6572
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:11780
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:14892
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:21952
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:8948
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:18792
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:12436
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:14568
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:19084
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:724
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:6180
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:9584
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:9884
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:13020
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:14672
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:19900
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:7628
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:15196
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:20312
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:9992
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:13368
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:14608
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:21028
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:5252
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:8064
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:15036
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:19796
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:10904
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:8448
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:14996
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:19244
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:6548
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:11684
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:10264
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:14916
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:20456
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:8588
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:3644
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:11952
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:7380
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:14868
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:19164
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:644 -
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:728
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:6012
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:8720
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:12352
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:14780
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:20280
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:7216
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:15124
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:19908
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:9776
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:12392
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:13112
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:14664
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:19924
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:5220
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:8352
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:16004
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:11240
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:9064
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:14980
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:21820
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:6580
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:11880
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:17288
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:14884
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:19132
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:9080
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:16812
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:12444
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:14748
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:20400
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"3⤵PID:536
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:6072
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:2724
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:12152
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:12640
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:14732
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:20972
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:7688
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:15084
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:21936
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:10420
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:12072
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:15100
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:20260
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"3⤵PID:5284
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:8072
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:16096
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:19884
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:11464
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:10324
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:14972
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:3776
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"3⤵PID:7100
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:15148
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:20244
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"3⤵PID:9672
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:13260
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"3⤵PID:13204
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:19576
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"3⤵PID:14640
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"3⤵PID:19124
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1604 -
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:1856 -
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:3492
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:6004
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:8824
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"7⤵PID:23240
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:12428
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:14756
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:21068
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:7520
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:15188
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:21036
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:10088
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:9328
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:15260
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:19188
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:5236
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:8048
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:16132
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:20112
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:11188
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:12156
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:14988
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:19196
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:6564
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:11692
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:16896
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:14908
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:20352
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:8680
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:13044
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:12276
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:14804
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:14712
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"3⤵PID:232
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:6380
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:9520
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:16660
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:12996
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:14688
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:19320
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:7920
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:14544
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:19100
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:10412
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:9020
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:15092
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:21020
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"3⤵PID:5292
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:8516
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:19580
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:11908
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:7268
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:14876
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:19156
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"3⤵PID:7092
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:15132
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:20980
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"3⤵PID:9680
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:24096
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"3⤵PID:13400
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"3⤵PID:14592
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"3⤵PID:4372
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4760 -
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"3⤵PID:4368
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:6276
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:9476
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:14444
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:13012
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:14552
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:19212
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:7988
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:15044
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:19804
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:10876
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:12188
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:15012
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:20268
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"3⤵PID:5212
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:6636
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:11536
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"6⤵PID:5044
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:14948
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:20320
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:8572
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:17536
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:12012
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:9300
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:15336
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:408
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"3⤵PID:6588
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:12364
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:14772
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:1612
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"3⤵PID:8976
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:2916
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"3⤵PID:12460
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"3⤵PID:14764
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"3⤵PID:20304
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"2⤵PID:1556
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"3⤵PID:6196
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:9568
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"5⤵PID:9592
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:13060
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:14632
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:21960
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"3⤵PID:7636
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:15060
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:19780
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"3⤵PID:9976
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"3⤵PID:13360
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"3⤵PID:14616
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"3⤵PID:20288
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"2⤵PID:5300
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"3⤵PID:8484
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:23504
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"3⤵PID:11652
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"4⤵PID:8500
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"3⤵PID:14932
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"3⤵PID:20424
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"2⤵PID:7152
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"3⤵PID:15164
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"3⤵PID:20472
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"2⤵PID:9756
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"3⤵PID:10288
-
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"2⤵PID:13104
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"2⤵PID:14656
-
-
C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\978484f88e9fc0b931b6f040eb4775528b9703c8250c46c7239dff6239361c65_NeikiAnalytics.exe"2⤵PID:19304
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2916 -s 8322⤵
- Program crash
PID:23360
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2916 -ip 29161⤵PID:23056
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\russian gay beast voyeur (Anniston).rar.exe
Filesize731KB
MD56960633e69c723d61abd6832c4c00c8c
SHA11e012306ff4caa3b30e3f8a3855c0b7fcb1afe68
SHA2567f65284cab2ee2ab1975800e70089d903a7b9e244561838ba0263d8839fec98e
SHA5126a008b1230d1c79a176dab705f152459c4eee4d9d86cf499db65deb402bdbfd727f928f30c12c17fced0570eebe2bed6c52c8aaec32bfb087bff12fcbdeb6bb9
-
Filesize
146B
MD5d4c1afda652e44300742de8f76c91f74
SHA1e56266b7201566fa50bcfb96b7c724d5a3990fc1
SHA256fbe6eea598dfeb1e840452d56e322229f4316545f02989e8de2bba6d115aeef3
SHA51236a3058782e8a8f3b1c174f5ea3e17e0f6c1429545edcfa023e4c7f6cfeecfd3c0e35a73640a999c0fcdb74190ad7238dbc3105e3c70cb2f5f5794f0c2a773a0