Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
14s -
max time network
67s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system -
submitted
25/06/2024, 22:42
Static task
static1
Behavioral task
behavioral1
Sample
1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
General
-
Target
1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe
-
Size
244KB
-
MD5
2196b9250587f6899ac0a7b53c34cca0
-
SHA1
fc90d1a21ea41da5dd9e06a0ebbc3200d1748899
-
SHA256
1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229
-
SHA512
464575e84ae7cd0b58de87e23befb17094087e59baec3cf741ccaa6a66e4bf520a55a0b9d38b6650055ccdc43cb245397164037e03ee0e64f3f84dd559e173d2
-
SSDEEP
6144:dXC4vgmhbIxs3NBBxUGcb5iZWvPqnijg9fYsams0:dXCNi9B/hZWXqquif0
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 16 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-2447855248-390457009-3660902674-1000\Control Panel\International\Geo\Nation 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2447855248-390457009-3660902674-1000\Control Panel\International\Geo\Nation 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2447855248-390457009-3660902674-1000\Control Panel\International\Geo\Nation 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2447855248-390457009-3660902674-1000\Control Panel\International\Geo\Nation 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2447855248-390457009-3660902674-1000\Control Panel\International\Geo\Nation 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2447855248-390457009-3660902674-1000\Control Panel\International\Geo\Nation 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2447855248-390457009-3660902674-1000\Control Panel\International\Geo\Nation 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2447855248-390457009-3660902674-1000\Control Panel\International\Geo\Nation 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2447855248-390457009-3660902674-1000\Control Panel\International\Geo\Nation 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2447855248-390457009-3660902674-1000\Control Panel\International\Geo\Nation 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2447855248-390457009-3660902674-1000\Control Panel\International\Geo\Nation 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2447855248-390457009-3660902674-1000\Control Panel\International\Geo\Nation 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2447855248-390457009-3660902674-1000\Control Panel\International\Geo\Nation 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2447855248-390457009-3660902674-1000\Control Panel\International\Geo\Nation 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2447855248-390457009-3660902674-1000\Control Panel\International\Geo\Nation 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-2447855248-390457009-3660902674-1000\Control Panel\International\Geo\Nation 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\H: 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File opened (read-only) \??\I: 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File opened (read-only) \??\X: 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File opened (read-only) \??\Y: 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File opened (read-only) \??\Z: 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File opened (read-only) \??\J: 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File opened (read-only) \??\N: 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File opened (read-only) \??\Q: 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File opened (read-only) \??\R: 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File opened (read-only) \??\T: 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File opened (read-only) \??\U: 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File opened (read-only) \??\A: 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File opened (read-only) \??\O: 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File opened (read-only) \??\P: 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File opened (read-only) \??\V: 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File opened (read-only) \??\W: 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File opened (read-only) \??\B: 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File opened (read-only) \??\E: 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File opened (read-only) \??\G: 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File opened (read-only) \??\K: 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File opened (read-only) \??\L: 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File opened (read-only) \??\M: 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File opened (read-only) \??\S: 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe -
Drops file in System32 directory 12 IoCs
description ioc Process File created C:\Windows\System32\DriverStore\Temp\asian hardcore gang bang masturbation femdom (Tatjana).mpg.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\fucking several models titts 50+ .avi.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\american gang bang uncut mature .rar.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\japanese trambling [milf] redhair .mpg.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\action voyeur ash (Karin,Janette).mpg.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\sperm licking ash fishy (Sonja,Ashley).avi.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\System32\LogFiles\Fax\Incoming\japanese beast girls circumcision .zip.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\swedish porn [milf] gorgeoushorny .mpg.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\tyrkish animal cumshot [milf] feet .mpeg.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\trambling full movie boots .zip.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\trambling masturbation nipples 50+ .mpg.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\gay fetish big .avi.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe -
Drops file in Program Files directory 17 IoCs
description ioc Process File created C:\Program Files (x86)\Google\Update\Download\xxx hardcore uncut mistress .mpg.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Program Files\dotnet\shared\porn action licking vagina latex .mpg.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\black cum lingerie big beautyfull (Sarah,Kathrin).rar.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft SQL Server\130\Shared\chinese lingerie public .mpg.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\horse [free] .zip.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\PrintAndShare\brasilian blowjob gang bang voyeur penetration .avi.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\bukkake trambling lesbian hairy .rar.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\danish fucking beastiality full movie (Melissa,Anniston).zip.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Program Files\Common Files\microsoft shared\asian fetish hidden (Karin).rar.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft SQL Server\130\Shared\swedish handjob lesbian cock beautyfull .mpg.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\Updates\Download\french bukkake kicking hot (!) high heels .zip.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\trambling lingerie hot (!) blondie .zip.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\fetish sleeping boobs latex .mpeg.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\Templates\gang bang hardcore uncut vagina YEâPSè& .zip.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\Microsoft Shared\malaysia kicking kicking masturbation ash .mpeg.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Temp\african nude trambling [free] glans bondage .mpg.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\Download\action sperm big .zip.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\assembly\temp\brasilian fucking big .zip.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor.Resources\african gang bang beastiality catfight cock latex .zip.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\cumshot gay several models hole .avi.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_it-it_adfc5e0bfca53431\malaysia bukkake public hairy .mpeg.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5021dd18efc0460c\gang bang catfight .zip.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.928_none_33e0d5558cdd7c61\horse fetish catfight hole .rar.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_es-es_30d7585a049f5b52\horse animal big (Christine).rar.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_uk-ua_5b152a8d329397ec\indian fucking full movie leather .avi.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.1_none_9aa486d790131d4e\hardcore nude big feet .mpeg.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_10.0.19041.572_none_cf90e12518baac85\african action licking pregnant .avi.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor\african nude action uncut .rar.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ces-ime-eashared-lm_31bf3856ad364e35_10.0.19041.1_none_3d0229d17c310f10\hardcore lesbian .mpg.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_en-us_bfae5918c0443f83\indian fetish catfight penetration .rar.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_62312bfbb33d478a\asian bukkake kicking full movie femdom .mpg.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\security\templates\beast several models hole blondie .mpg.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.1_none_0bc0f3d4cd7dc8fd\italian cum several models (Jade,Liz).mpeg.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.84_none_81616275259e37fe\american blowjob lesbian .avi.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_10.0.19041.1_none_f07d4fae3e8e883f\beast xxx [milf] .mpg.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..s-ime-eashared-ihds_31bf3856ad364e35_10.0.19041.1_none_e8996b7d3512363f\african handjob [milf] .mpeg.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..se-shared-datafiles_31bf3856ad364e35_10.0.19041.1_none_2f5f00d280dce9f6\spanish lesbian masturbation upskirt (Jenna,Sonja).zip.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\CbsTemp\american xxx blowjob sleeping (Sarah).mpeg.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Templates\indian beastiality public pregnant .mpg.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\inclusiveOobe\view\templates\spanish sperm lesbian glans shoes (Liz,Melissa).mpeg.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\lesbian uncut lady .mpg.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_d38ece58f77171b4\japanese beast cumshot sleeping ash .mpeg.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.746_none_d01527cffa9c25bc\african lingerie bukkake public (Anniston).mpeg.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.1_none_2fe79eae2833b9b1\american handjob lesbian penetration .rar.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.867_none_c29826784f9429f8\lingerie porn masturbation .zip.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-h..public-utils-shared_31bf3856ad364e35_10.0.19041.1202_none_d8a1416ab7cccdcf\blowjob big cock .mpg.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-h..public-utils-shared_31bf3856ad364e35_10.0.19041.1_none_19d22204a1f3fcaf\american gang bang sperm [milf] .mpg.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\xxx catfight latex .avi.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\SoftwareDistribution\Download\african hardcore kicking hot (!) boobs traffic .zip.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_en-us_215194e2327a46ac\hardcore beast catfight legs sm .zip.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_it-it_bdb6c49fcea35732\french trambling hot (!) vagina shower .rar.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.1_none_5d54c0aac5c3c12c\action sleeping 50+ .zip.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\Downloads\tyrkish action horse [milf] leather .mpg.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\mssrv.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\templates\norwegian action public balls .mpeg.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.ShellCommon.SharedResources\trambling big pregnant .mpg.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.844_none_855aff45853749ef\cum hot (!) balls (Samantha,Karin).avi.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.746_none_2212358fc33cc10f\gay full movie .mpeg.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_it-it_4c5922428a6f2d08\kicking horse [milf] blondie .zip.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_en-us_310bfb76047869ad\french bukkake fetish full movie .rar.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5fdc43acc1be690d\german horse kicking catfight balls (Christine).zip.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.844_none_67b5915b5651dd8a\handjob catfight mistress .zip.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.1_none_a80cea873b2a6772\blowjob handjob lesbian cock circumcision .zip.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.1_none_fa09f84703cb02c5\asian lingerie public traffic .mpg.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_de-de_16bd831fd16633be\african fucking hot (!) traffic .avi.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\Downloads\danish nude action voyeur feet .avi.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-a..gement-uevtemplates_31bf3856ad364e35_10.0.19041.1_none_0d66b54875835a49\kicking action [bangbus] ash .avi.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-ime-eashared-proxy_31bf3856ad364e35_10.0.19041.1_none_4c786ae2f508e6d5\fucking uncut .mpeg.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.844_none_57eddd48e7a74274\danish gang bang sleeping redhair .avi.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\PLA\Templates\norwegian nude uncut .avi.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_de-de_881b257d159a5de8\american xxx beast voyeur mistress .mpeg.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.789_en-us_58ebf9ecc407e3c0\action gang bang girls (Sandy,Jenna).mpeg.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\lingerie beastiality public wifey .mpg.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\kicking hidden glans lady .avi.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\assembly\tmp\american lesbian [free] ejaculation .rar.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\Downloaded Program Files\african blowjob masturbation redhair (Sylvia,Sarah).avi.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\italian animal hidden legs .mpg.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.746_none_ab42fb092bda9182\fucking lesbian girls blondie .avi.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_ee7ea14f7d8a3ee3\spanish cumshot sleeping (Janette,Britney).rar.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor\french fetish kicking catfight (Ashley).mpg.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.1_none_833abdc06c68d338\american gang bang beastiality full movie mistress (Samantha).avi.exe 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2900 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 2900 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 5084 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 5084 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 2900 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 2900 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 3432 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 3432 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 4212 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 4212 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 5084 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 5084 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 2900 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 2900 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 4312 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 4312 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 752 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 752 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 3432 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 3432 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 532 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 532 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 5084 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 5084 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 4780 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 4780 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 2900 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 2900 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 4212 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 4212 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 1108 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 1108 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 4312 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 4312 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 3096 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 3096 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 2884 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 2884 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 3432 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 3432 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 5084 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 5084 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 432 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 432 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 3868 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 3868 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 2900 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 2900 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 4988 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 4988 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 4540 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 4540 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 752 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 752 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 4212 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 4212 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 4468 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 4468 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 532 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 532 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 4780 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 4780 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 1556 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 1556 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 2900 wrote to memory of 5084 2900 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 87 PID 2900 wrote to memory of 5084 2900 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 87 PID 2900 wrote to memory of 5084 2900 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 87 PID 5084 wrote to memory of 3432 5084 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 92 PID 5084 wrote to memory of 3432 5084 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 92 PID 5084 wrote to memory of 3432 5084 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 92 PID 2900 wrote to memory of 4212 2900 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 93 PID 2900 wrote to memory of 4212 2900 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 93 PID 2900 wrote to memory of 4212 2900 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 93 PID 3432 wrote to memory of 4312 3432 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 94 PID 3432 wrote to memory of 4312 3432 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 94 PID 3432 wrote to memory of 4312 3432 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 94 PID 5084 wrote to memory of 752 5084 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 95 PID 5084 wrote to memory of 752 5084 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 95 PID 5084 wrote to memory of 752 5084 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 95 PID 2900 wrote to memory of 532 2900 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 96 PID 2900 wrote to memory of 532 2900 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 96 PID 2900 wrote to memory of 532 2900 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 96 PID 4212 wrote to memory of 4780 4212 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 97 PID 4212 wrote to memory of 4780 4212 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 97 PID 4212 wrote to memory of 4780 4212 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 97 PID 4312 wrote to memory of 1108 4312 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 99 PID 4312 wrote to memory of 1108 4312 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 99 PID 4312 wrote to memory of 1108 4312 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 99 PID 3432 wrote to memory of 3096 3432 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 100 PID 3432 wrote to memory of 3096 3432 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 100 PID 3432 wrote to memory of 3096 3432 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 100 PID 5084 wrote to memory of 2884 5084 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 101 PID 5084 wrote to memory of 2884 5084 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 101 PID 5084 wrote to memory of 2884 5084 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 101 PID 2900 wrote to memory of 432 2900 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 102 PID 2900 wrote to memory of 432 2900 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 102 PID 2900 wrote to memory of 432 2900 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 102 PID 752 wrote to memory of 3868 752 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 103 PID 752 wrote to memory of 3868 752 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 103 PID 752 wrote to memory of 3868 752 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 103 PID 4212 wrote to memory of 4988 4212 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 104 PID 4212 wrote to memory of 4988 4212 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 104 PID 4212 wrote to memory of 4988 4212 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 104 PID 532 wrote to memory of 4540 532 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 105 PID 532 wrote to memory of 4540 532 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 105 PID 532 wrote to memory of 4540 532 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 105 PID 4780 wrote to memory of 4468 4780 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 106 PID 4780 wrote to memory of 4468 4780 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 106 PID 4780 wrote to memory of 4468 4780 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 106 PID 4312 wrote to memory of 1556 4312 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 109 PID 4312 wrote to memory of 1556 4312 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 109 PID 4312 wrote to memory of 1556 4312 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 109 PID 1108 wrote to memory of 2396 1108 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 110 PID 1108 wrote to memory of 2396 1108 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 110 PID 1108 wrote to memory of 2396 1108 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 110 PID 3432 wrote to memory of 1400 3432 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 111 PID 3432 wrote to memory of 1400 3432 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 111 PID 3432 wrote to memory of 1400 3432 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 111 PID 5084 wrote to memory of 3692 5084 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 112 PID 5084 wrote to memory of 3692 5084 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 112 PID 5084 wrote to memory of 3692 5084 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 112 PID 2900 wrote to memory of 1028 2900 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 113 PID 2900 wrote to memory of 1028 2900 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 113 PID 2900 wrote to memory of 1028 2900 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 113 PID 752 wrote to memory of 2472 752 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 114 PID 752 wrote to memory of 2472 752 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 114 PID 752 wrote to memory of 2472 752 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 114 PID 2884 wrote to memory of 3364 2884 1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe 115
Processes
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"1⤵
- Checks computer location settings
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2900 -
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:5084 -
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3432 -
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4312 -
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1108 -
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:2396
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:5764
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"8⤵PID:8972
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"9⤵PID:18672
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"9⤵PID:27320
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"8⤵PID:11932
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"8⤵PID:2076
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"8⤵PID:19616
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"8⤵PID:29408
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:7616
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"8⤵PID:23248
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:12136
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"8⤵PID:26548
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:14508
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:20016
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:26184
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:5292
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:6256
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"8⤵PID:16576
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"8⤵PID:23088
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:9384
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"8⤵PID:16584
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"8⤵PID:23096
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:14748
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:20892
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:12548
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:6704
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:16720
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:23104
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:8484
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:24548
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:11152
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:516
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:15600
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:14484
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:19868
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:20116
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵
- Suspicious behavior: EnumeratesProcesses
PID:1556 -
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:6184
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:9424
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"8⤵PID:19264
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"8⤵PID:28192
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:14764
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:22128
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:7600
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:16264
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:22604
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:10488
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:22644
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:14516
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:19820
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:21240
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:5316
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:6680
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:980
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:15684
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:9696
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:23152
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:12660
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:24776
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:14428
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:19968
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:12832
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:6640
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:11340
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:18584
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:15700
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:14380
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:19928
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:20228
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:8476
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:19272
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:27704
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:11404
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:17224
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:6820
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:3612
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:19152
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:27628
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:3096 -
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:2084
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:6244
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:9376
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"8⤵PID:22552
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:14596
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:19828
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:20124
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:7644
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:23160
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:10000
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:18824
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:27444
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:13068
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:25424
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:2352
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:19520
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:16428
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:5260
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:6772
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:13036
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"8⤵PID:27604
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:3508
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:18848
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:27460
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:8632
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:17128
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:25892
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:11588
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:8684
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:15636
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:3080
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:19600
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:23628
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:6620
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:11288
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:22396
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:14436
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:19876
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:21268
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:8364
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:23192
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:11208
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:17112
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:25884
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:2544
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:19592
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:29428
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:1400
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:5504
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:9312
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:23232
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:14588
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:20076
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:21296
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:7544
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:13572
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:3420
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:19484
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:16408
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:10288
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:17104
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:25876
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:14500
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:19788
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:19744
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:5284
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:7132
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:16560
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:22576
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:8840
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:17232
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:26612
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:11604
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:27252
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:13444
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:20936
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:20112
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:6628
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:9564
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:6648
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:11728
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:19496
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:16416
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:8416
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:19736
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:29400
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:11184
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:22612
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:14492
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:19796
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:16308
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:752 -
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:3868 -
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:5156
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:6236
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:8404
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"8⤵PID:23136
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:11620
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"8⤵PID:6576
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:14364
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:19844
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:21264
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:7608
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:23200
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:10864
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:18516
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:26556
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:14396
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:19952
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:20856
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:5680
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:9056
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:24540
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:14732
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:21456
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:19176
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:7240
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:16624
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:23120
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:9848
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:17560
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:26596
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:14580
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:20000
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:20656
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:2472
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:5212
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:9368
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:23256
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:14572
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:19852
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:20864
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:7512
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:22256
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:9832
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:19208
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:25080
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:14716
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:21740
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:23672
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:5276
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:7372
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:16240
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:23112
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:10268
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:20008
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:20084
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:13076
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:29448
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:4932
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:19860
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:28416
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:6604
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:10420
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:18884
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:27584
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:14692
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:20900
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:19464
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:8408
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:23216
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:11596
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:17096
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:26096
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:14620
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:19836
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:12544
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2884 -
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:3364
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:6300
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:9048
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:18636
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:26508
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:12652
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:29456
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:4664
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:19632
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:20660
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:7944
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:16600
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:25204
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:10384
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:24728
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:14676
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:4784
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:27744
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:5308
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:7772
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:16592
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:22596
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:10400
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:23240
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:14700
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:21932
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:29440
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:6712
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:11924
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:26540
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:13244
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:20944
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:12260
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:8468
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:4512
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:15620
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:11436
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:17136
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:25948
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:14708
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:20448
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:19064
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:3692
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:6208
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:2568
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:17280
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:26572
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:14772
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:20100
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:20888
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:7624
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:26104
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:11220
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:22684
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:14444
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:19984
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:21216
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:5300
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:7952
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:3064
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:10392
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:24532
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:14556
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:22264
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:6612
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:11332
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:26588
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:14420
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:19892
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:12504
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:8424
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:19412
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:27736
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:11192
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:18996
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:16276
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:13564
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:3732
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:19804
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:20524
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4212 -
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4780 -
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4468 -
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:5644
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:8220
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:16256
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:21328
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:12644
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:9240
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:3200
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:19584
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:16776
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:6344
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:16728
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:24684
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:8792
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:23168
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:11176
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:19200
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:23948
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:14740
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:20400
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:20964
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:1452
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:6092
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:9256
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:17120
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:26088
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:11628
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:14388
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:19908
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:15576
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:7284
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:16616
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:22660
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:9704
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:18152
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:26620
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:14636
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:21244
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:22420
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:5324
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:8100
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:23208
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:10740
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:18832
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:27452
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:13464
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:4528
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:19480
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:16412
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:6724
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:11804
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:24752
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:14524
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:21756
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:23644
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:8396
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:25468
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:10104
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:19184
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:27644
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:14724
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:20952
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:20960
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4988 -
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:5184
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:6564
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:9796
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:17872
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:6888
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:14564
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:20916
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:21236
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:8324
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:23264
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:11480
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:23344
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:14340
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:19608
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:12412
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:5888
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:8496
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:22672
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:10428
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:23144
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:14660
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:20440
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:21480
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:6876
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:16568
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:22588
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:9664
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:22272
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:14644
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:20412
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:21212
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:5116
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:6000
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:9160
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:24556
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:13084
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:3336
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:19512
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:16432
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:7536
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:15732
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:22192
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:9840
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:23184
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:14668
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:20408
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:21004
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:5368
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:7380
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:18632
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:20984
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:10196
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:17208
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:26532
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:14684
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:21748
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:23340
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:7064
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:18876
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:27596
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:8544
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:19884
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:21260
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:11580
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:5060
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:14356
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:19920
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:21060
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:532 -
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:4540 -
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:5148
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:6504
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:9688
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:17216
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"7⤵PID:26604
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:14652
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:21160
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:12324
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:8356
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:16248
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:23080
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:11504
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:22248
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:14372
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:19900
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:21484
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:5752
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:8784
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:22392
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:11692
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:27356
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:3084
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:19504
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:16420
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:3952
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:11648
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:16964
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:25784
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:14468
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:19992
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:21272
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:9620
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:19192
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:27708
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:12668
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:27468
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:9332
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:19108
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:27612
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:3780
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:4028
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:9184
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:19160
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:27636
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:13092
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:13388
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:19528
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:16436
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:7552
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:164
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:29464
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:13604
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:18816
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:27312
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:9988
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:3988
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:16316
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:14628
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:20432
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:19540
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:5268
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:7276
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:11988
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:29392
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:1636
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:19624
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:15444
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:9656
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:18472
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:15652
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:13028
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:7268
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:13236
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:19564
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:16424
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:6924
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:12160
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:26564
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:14476
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:19772
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:12924
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:8676
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:23176
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:11684
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:26580
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:14452
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:19780
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:21304
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:432 -
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:5176
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:6584
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:11396
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:18572
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"6⤵PID:27260
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:14404
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:20928
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:20676
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:8332
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:24716
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:10568
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:932
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:27792
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:14460
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:19960
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:28880
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:5652
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:8800
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:23224
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:11716
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:22280
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:5008
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:19976
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:20636
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:6872
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:16608
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:23128
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:9432
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:18760
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:16236
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:14612
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:19812
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:21252
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"2⤵PID:1028
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:6076
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:8832
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:15724
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"5⤵PID:22184
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:12116
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:14348
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:19936
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:20632
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:7228
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:13476
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:1552
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:19764
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:21256
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:9788
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:19288
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:27728
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:14756
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:20424
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:21188
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"2⤵PID:5372
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:7364
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:16736
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:24520
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:9712
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:17864
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"4⤵PID:26360
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:14604
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:20908
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:20884
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"2⤵PID:6952
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:13056
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:1992
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:20176
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:21320
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"2⤵PID:8504
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:23272
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"2⤵PID:11444
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:19280
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"3⤵PID:27720
-
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"2⤵PID:14412
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"2⤵PID:19944
-
-
C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1c6fd6c7d437e1afb80cbe26a14416668f588e80a8647bc2be817b85ddaad229_NeikiAnalytics.exe"2⤵PID:28184
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\trambling lingerie hot (!) blondie .zip.exe
Filesize804KB
MD59b35d7285eead617a7c1f9d9079781c2
SHA1563b2db66c560c94527364435332a02a58516737
SHA25696b5915342584ac7b304fad123aa1d1ed35ecf6519b08f12f69f59e583b30451
SHA512933416ea823a73440fbfbf1c8e1b0f516ae27f9fc2c74b903bc23569ee55561cd532e3ed4ddb399868eecc4955fb36df295fd79efeab7db2ccc5547759415d03