Analysis
-
max time kernel
15s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system -
submitted
28/06/2024, 10:17
Static task
static1
Behavioral task
behavioral1
Sample
92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
General
-
Target
92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe
-
Size
928KB
-
MD5
c7f899e2debc1059c3361f7518578ca0
-
SHA1
8074c12bdedd18b90585f7c4419b5edadf5cc74b
-
SHA256
92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19
-
SHA512
1877fbfe2d32dc5b08dbe3756bfe4c9c44905976ebcceb7e5b9533a1a0fe155c56351d68dd55799dd68a35eed75a0caeff101c086a24174d332d130a515e720c
-
SSDEEP
24576:oWZgvwyphIgNJblEFTFFXo7pXHdRGmcFkfLARq:VZgvZlOFXGd9gmpLMq
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 16 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000\Control Panel\International\Geo\Nation 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000\Control Panel\International\Geo\Nation 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000\Control Panel\International\Geo\Nation 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000\Control Panel\International\Geo\Nation 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000\Control Panel\International\Geo\Nation 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000\Control Panel\International\Geo\Nation 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000\Control Panel\International\Geo\Nation 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000\Control Panel\International\Geo\Nation 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000\Control Panel\International\Geo\Nation 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000\Control Panel\International\Geo\Nation 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000\Control Panel\International\Geo\Nation 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000\Control Panel\International\Geo\Nation 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000\Control Panel\International\Geo\Nation 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000\Control Panel\International\Geo\Nation 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000\Control Panel\International\Geo\Nation 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe Key value queried \REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000\Control Panel\International\Geo\Nation 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\mssrv32 = "C:\\Windows\\mssrv.exe" 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\E: 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File opened (read-only) \??\V: 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File opened (read-only) \??\X: 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File opened (read-only) \??\T: 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File opened (read-only) \??\A: 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File opened (read-only) \??\K: 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File opened (read-only) \??\P: 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File opened (read-only) \??\R: 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File opened (read-only) \??\N: 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File opened (read-only) \??\O: 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File opened (read-only) \??\Q: 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File opened (read-only) \??\Y: 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File opened (read-only) \??\H: 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File opened (read-only) \??\I: 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File opened (read-only) \??\J: 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File opened (read-only) \??\L: 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File opened (read-only) \??\Z: 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File opened (read-only) \??\U: 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File opened (read-only) \??\W: 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File opened (read-only) \??\B: 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File opened (read-only) \??\G: 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File opened (read-only) \??\M: 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File opened (read-only) \??\S: 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe -
Drops file in System32 directory 12 IoCs
description ioc Process File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\beastiality porn public mistress (Christine,Britney).avi.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\fucking big cock .rar.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\brasilian beast public (Anniston).avi.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\french bukkake several models 40+ (Liz,Sylvia).mpeg.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\SysWOW64\config\systemprofile\cumshot kicking hot (!) ash shower (Kathrin,Britney).zip.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\japanese trambling nude [free] redhair (Anniston).mpeg.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\SysWOW64\IME\SHARED\brasilian porn [free] feet redhair .mpeg.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\PSDesiredStateConfiguration\WebDownloadManager\british fucking masturbation circumcision .mpeg.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\System32\DriverStore\Temp\swedish trambling xxx [free] gorgeoushorny .avi.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\SysWOW64\FxsTmp\tyrkish nude bukkake hidden pregnant .rar.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\System32\LogFiles\Fax\Incoming\asian beast animal girls stockings .zip.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\SmbShare\sperm fetish catfight granny .avi.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe -
Drops file in Program Files directory 20 IoCs
description ioc Process File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\chinese animal lesbian lesbian .avi.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Program Files (x86)\Windows Sidebar\Shared Gadgets\fetish fucking voyeur glans hairy .zip.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft SQL Server\130\Shared\japanese lingerie public .mpg.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\PrintAndShare\japanese animal beast big gorgeoushorny .zip.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\cum uncut girly .mpg.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Program Files (x86)\Common Files\Microsoft Shared\xxx [bangbus] titts swallow .avi.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\EdgeUpdate\Download\african bukkake cumshot licking .avi.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Program Files\Common Files\microsoft shared\asian beast lesbian .avi.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\Templates\cum xxx several models .mpeg.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft SQL Server\130\Shared\action public sweet (Anniston).mpeg.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\Temp\german beastiality lesbian catfight fishy .mpg.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\Temp\EU8B19.tmp\african cum sperm masturbation .mpg.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\xxx kicking [milf] wifey .mpg.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Program Files\Windows Sidebar\Shared Gadgets\lesbian hot (!) black hairunshaved .avi.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Update\Download\lesbian masturbation .avi.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Program Files (x86)\Google\Temp\indian lingerie public lady .avi.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{012F12C5-F267-46F5-BABE-4C602515640C}\EDGEMITMP_0327D.tmp\french porn lesbian sleeping hole (Ashley,Sonja).zip.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Program Files\dotnet\shared\japanese kicking lingerie hidden glans wifey .zip.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\horse handjob uncut .rar.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Program Files\Microsoft Office\Updates\Download\german blowjob masturbation vagina wifey (Sonja,Anniston).mpeg.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-eashared-imebroker_31bf3856ad364e35_10.0.19041.84_none_81616275259e37fe\canadian bukkake uncut (Tatjana,Jenna).zip.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..-ime-eashared-proxy_31bf3856ad364e35_10.0.19041.1_none_4c786ae2f508e6d5\animal [bangbus] beautyfull .rar.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.1_none_833abdc06c68d338\hardcore [bangbus] vagina .zip.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-eashared-coretip_31bf3856ad364e35_10.0.19041.1_none_2fe79eae2833b9b1\beastiality horse several models ash .mpeg.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\mssrv.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\templates\brasilian nude nude [milf] .avi.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.746_none_1bbb9ab9fc52bac9\italian bukkake big castration .zip.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_it-it_e79b400a6df5fd2c\tyrkish cumshot cumshot girls .mpg.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_es-es_bf79b5fcc06b3128\xxx horse [milf] hole sm (Kathrin,Jade).mpg.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_64\Temp\american blowjob hot (!) .rar.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\CbsTemp\swedish animal gay [milf] bedroom .rar.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_en-us_215194e2327a46ac\japanese hardcore beastiality hidden .mpeg.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-composable-sharepicker_31bf3856ad364e35_10.0.19041.1_none_c87e96327faffd0e\malaysia porn [free] (Sylvia,Gina).rar.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-candidateui_31bf3856ad364e35_10.0.19041.746_none_ab42fb092bda9182\danish beast catfight glans .mpeg.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_10.0.19041.1_none_f07d4fae3e8e883f\spanish beastiality several models .avi.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..se-shared-datafiles_31bf3856ad364e35_10.0.19041.1_none_2f5f00d280dce9f6\french cumshot [milf] boobs 50+ (Jenna,Tatjana).rar.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-b..-bcdtemplate-client_31bf3856ad364e35_10.0.19041.1_none_de1581e9a275faf8\horse bukkake masturbation castration (Kathrin).zip.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_en-us_5af076e0a3cb0fa7\french animal kicking catfight hole (Kathrin,Kathrin).mpeg.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-mccs-engineshared_31bf3856ad364e35_10.0.19041.1_none_abfc9db6c377b91f\horse beastiality voyeur feet Ôï .avi.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..ashared-filemanager_31bf3856ad364e35_10.0.19041.844_none_855aff45853749ef\brasilian cumshot trambling big vagina ejaculation (Britney).mpg.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\british horse handjob several models legs femdom .mpeg.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\InputMethod\SHARED\action lingerie full movie (Sarah).mpg.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Templates\chinese handjob girls boobs gorgeoushorny .mpeg.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\SystemApps\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\webapps\inclusiveOobe\view\templates\german blowjob bukkake catfight .mpeg.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-a..gement-uevtemplates_31bf3856ad364e35_10.0.19041.1_none_0d66b54875835a49\blowjob several models balls .avi.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v4.0.30319_32\Temp\bukkake sperm big cock sweet .mpeg.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-kjshared_31bf3856ad364e35_10.0.19041.1_none_f3b35d713ce0fc7f\german beastiality nude uncut feet shoes (Samantha,Sonja).rar.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..me-jkshared-roaming_31bf3856ad364e35_10.0.19041.1_none_fa09f84703cb02c5\tyrkish blowjob cum girls .zip.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_en-us_310bfb76047869ad\canadian action kicking several models shower .avi.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_10.0.19041.1_none_a7ad1894592cfa12\fucking xxx big latex .mpg.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor.Resources\italian cumshot trambling masturbation nipples boots .mpg.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_de-de_7860bee9439c3ae7\sperm cumshot full movie leather (Samantha,Karin).zip.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.867_none_c29826784f9429f8\canadian beastiality hidden cock swallow .zip.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..olicy-admin-admtmpl_31bf3856ad364e35_10.0.19041.572_none_cf90e12518baac85\french nude xxx full movie Ôï .avi.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_c3d467c525734eb3\bukkake public .avi.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..nearshareexperience_31bf3856ad364e35_10.0.19041.1288_none_ca3007304990b2ea\asian nude hidden titts pregnant .rar.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-m..ineshared.resources_31bf3856ad364e35_10.0.19041.1_en-us_99ddc8ce8d3d6dac\kicking full movie .mpeg.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_10.0.19041.1_none_c6da8048542fddc7\asian lingerie lesbian legs beautyfull .mpg.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.GroupPolicy.AdmTmplEditor\fucking [milf] boobs wifey (Sylvia,Samantha).zip.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.GroupPolicy.AdmTmplEditor\german xxx handjob uncut cock bedroom .mpeg.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\Downloads\blowjob licking titts pregnant .zip.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.867_en-us_49453482f1fb5356\chinese xxx [milf] beautyfull (Samantha,Curtney).rar.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-devdispitemprovider_31bf3856ad364e35_10.0.19041.1_none_9aa486d790131d4e\cumshot catfight sweet .mpg.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-g..n-admtmpl.resources_31bf3856ad364e35_10.0.19041.1_de-de_16bd831fd16633be\lingerie cum sleeping nipples wifey .rar.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-h..public-utils-shared_31bf3856ad364e35_10.0.19041.1_none_19d22204a1f3fcaf\japanese porn lesbian licking mature .mpeg.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared_31bf3856ad364e35_10.0.19041.1_none_bd731e5b85dd203e\swedish fetish licking pregnant .rar.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-d..e-eashared-moimeexe_31bf3856ad364e35_10.0.19041.746_none_d01527cffa9c25bc\american gang bang big balls (Ashley).rar.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_fr-fr_fd7349c396c417ae\swedish horse sleeping .mpeg.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\danish hardcore sperm full movie .rar.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_es-es_30d7585a049f5b52\porn hidden .mpeg.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.1_none_0bc0f3d4cd7dc8fd\fucking public nipples femdom .zip.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5021dd18efc0460c\fucking sleeping upskirt .zip.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_ja-jp_5fdc43acc1be690d\swedish nude action lesbian .rar.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-i..ore-shareexperience_31bf3856ad364e35_10.0.19041.964_none_1c1a193f5bfcf136\american fucking masturbation castration .zip.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\PLA\Templates\italian hardcore trambling uncut cock .avi.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\SystemResources\Windows.UI.ShellCommon\SharePickerUI\fetish public black hairunshaved .avi.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..utionservice-shared_31bf3856ad364e35_10.0.19041.928_none_33e0d5558cdd7c61\fetish bukkake voyeur hole .mpeg.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\british beastiality lingerie hot (!) cock hotel (Gina,Curtney).rar.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_es-es_211cf1c632a13851\action catfight cock .rar.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_hyperv-compute-cont..ce-shared.resources_31bf3856ad364e35_10.0.19041.1_it-it_adfc5e0bfca53431\beast several models feet circumcision (Samantha,Sonja).zip.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-onecore-sharehost.resources_31bf3856ad364e35_10.0.19041.1_uk-ua_5b152a8d329397ec\african xxx sleeping legs .mpeg.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_10.0.19041.906_none_ef0e010d1381269b\handjob lesbian nipples boots .avi.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\WinSxS\amd64_microsoft-windows-nfs-shared.resources_31bf3856ad364e35_10.0.19041.1_es-es_5abbd3c4a3f2014c\american fetish voyeur bondage .mpeg.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe File created C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Templates\fetish animal masturbation nipples 40+ .avi.exe 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3780 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 3780 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 4980 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 4980 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 3780 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 3780 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 3096 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 3096 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 2564 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 2564 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 4980 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 4980 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 3780 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 3780 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 1956 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 1956 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 2240 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 2240 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 3096 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 3096 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 3660 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 3660 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 4980 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 4224 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 4224 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 4980 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 2564 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 2564 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 3780 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 3780 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 1952 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 1952 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 3108 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 3108 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 2240 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 1956 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 1956 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 2240 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 1892 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 1892 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 1884 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 1884 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 1852 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 1852 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 3780 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 3780 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 3096 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 3096 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 2564 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 3904 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 2564 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 3904 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 4980 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 4980 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 1408 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 1408 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 3572 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 3572 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 3660 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 4224 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 4224 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 3660 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 1280 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 1280 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 3780 wrote to memory of 4980 3780 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 86 PID 3780 wrote to memory of 4980 3780 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 86 PID 3780 wrote to memory of 4980 3780 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 86 PID 4980 wrote to memory of 3096 4980 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 89 PID 4980 wrote to memory of 3096 4980 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 89 PID 4980 wrote to memory of 3096 4980 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 89 PID 3780 wrote to memory of 2564 3780 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 90 PID 3780 wrote to memory of 2564 3780 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 90 PID 3780 wrote to memory of 2564 3780 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 90 PID 3096 wrote to memory of 1956 3096 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 93 PID 3096 wrote to memory of 1956 3096 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 93 PID 3096 wrote to memory of 1956 3096 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 93 PID 4980 wrote to memory of 2240 4980 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 94 PID 4980 wrote to memory of 2240 4980 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 94 PID 4980 wrote to memory of 2240 4980 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 94 PID 2564 wrote to memory of 3660 2564 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 95 PID 2564 wrote to memory of 3660 2564 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 95 PID 2564 wrote to memory of 3660 2564 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 95 PID 3780 wrote to memory of 4224 3780 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 96 PID 3780 wrote to memory of 4224 3780 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 96 PID 3780 wrote to memory of 4224 3780 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 96 PID 1956 wrote to memory of 1952 1956 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 98 PID 1956 wrote to memory of 1952 1956 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 98 PID 1956 wrote to memory of 1952 1956 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 98 PID 2240 wrote to memory of 3108 2240 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 99 PID 2240 wrote to memory of 3108 2240 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 99 PID 2240 wrote to memory of 3108 2240 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 99 PID 3096 wrote to memory of 1892 3096 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 100 PID 3096 wrote to memory of 1892 3096 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 100 PID 3096 wrote to memory of 1892 3096 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 100 PID 3780 wrote to memory of 1884 3780 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 101 PID 3780 wrote to memory of 1884 3780 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 101 PID 3780 wrote to memory of 1884 3780 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 101 PID 4980 wrote to memory of 1852 4980 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 102 PID 4980 wrote to memory of 1852 4980 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 102 PID 4980 wrote to memory of 1852 4980 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 102 PID 2564 wrote to memory of 3904 2564 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 103 PID 2564 wrote to memory of 3904 2564 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 103 PID 2564 wrote to memory of 3904 2564 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 103 PID 3660 wrote to memory of 1408 3660 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 104 PID 3660 wrote to memory of 1408 3660 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 104 PID 3660 wrote to memory of 1408 3660 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 104 PID 4224 wrote to memory of 3572 4224 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 105 PID 4224 wrote to memory of 3572 4224 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 105 PID 4224 wrote to memory of 3572 4224 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 105 PID 2240 wrote to memory of 1280 2240 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 106 PID 2240 wrote to memory of 1280 2240 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 106 PID 2240 wrote to memory of 1280 2240 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 106 PID 1956 wrote to memory of 2976 1956 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 107 PID 1956 wrote to memory of 2976 1956 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 107 PID 1956 wrote to memory of 2976 1956 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 107 PID 1952 wrote to memory of 1380 1952 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 108 PID 1952 wrote to memory of 1380 1952 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 108 PID 1952 wrote to memory of 1380 1952 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 108 PID 3108 wrote to memory of 3936 3108 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 109 PID 3108 wrote to memory of 3936 3108 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 109 PID 3108 wrote to memory of 3936 3108 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 109 PID 3780 wrote to memory of 220 3780 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 110 PID 3780 wrote to memory of 220 3780 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 110 PID 3780 wrote to memory of 220 3780 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 110 PID 3096 wrote to memory of 3420 3096 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 111 PID 3096 wrote to memory of 3420 3096 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 111 PID 3096 wrote to memory of 3420 3096 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 111 PID 4980 wrote to memory of 4756 4980 92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe 112
Processes
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"1⤵
- Checks computer location settings
- Adds Run key to start application
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3780 -
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4980 -
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3096 -
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1956 -
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1952 -
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:1380
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:6256
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"8⤵PID:8760
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"9⤵PID:18172
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"9⤵PID:22604
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"8⤵PID:12420
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"9⤵PID:11016
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"8⤵PID:16428
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"8⤵PID:21148
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:6752
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"8⤵PID:13296
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"9⤵PID:26460
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"8⤵PID:16344
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"8⤵PID:21364
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:8680
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"8⤵PID:19444
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:12232
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"8⤵PID:22676
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:16152
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:20400
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:5460
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:8636
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"8⤵PID:17680
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"8⤵PID:22228
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:11556
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:16444
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:21236
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:6912
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:18648
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:25608
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:9124
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:23512
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:13220
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:11344
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:16144
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:20424
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:2976
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:6152
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:8460
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"8⤵PID:18288
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"8⤵PID:23920
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:11120
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"8⤵PID:22748
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:16524
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:21164
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:6880
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:12852
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"8⤵PID:2704
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:16128
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:20432
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:9116
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:13212
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:19204
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:16160
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:19904
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:5444
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:7504
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:17672
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:22268
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:9796
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:16604
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:21228
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:6952
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:17688
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:22716
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:9676
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:13796
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:16184
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:20408
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:1892 -
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:960
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:6312
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:8524
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"8⤵PID:18244
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"8⤵PID:23912
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:12900
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"8⤵PID:23368
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:16120
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:21036
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:6840
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:19004
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:6108
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:9564
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:19072
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:16580
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:5216
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:5380
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:8688
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:13348
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:16500
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:21124
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:6984
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:18164
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:25944
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:9660
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:25648
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:13836
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:16168
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:20264
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:3420
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:6280
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:8516
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:22708
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:12888
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:22596
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:16404
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:21372
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:6848
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:18196
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:22612
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:8940
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:13044
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:22552
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:14816
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:20820
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:5420
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:7752
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:18068
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:21028
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:9804
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:16412
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:21012
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:6944
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:18156
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:22644
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:9424
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:18568
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:13968
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:16296
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:21172
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2240 -
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3108 -
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:3936
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:6236
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:8532
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"8⤵PID:17136
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:11476
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:16636
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:3496
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:6824
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:18108
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:22692
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:8872
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:23068
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:12208
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:26436
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:16320
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:20580
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:5436
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:8572
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:22544
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:11604
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:16192
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:20376
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:6896
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:18140
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:22636
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:9740
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:18308
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:23496
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:13828
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:16176
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:20392
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵
- Suspicious behavior: EnumeratesProcesses
PID:1280 -
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:6176
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:8644
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:1928
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:10892
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:23388
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:16628
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:22284
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:6872
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:10180
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:24652
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:14028
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:22536
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:16272
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:20588
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:9668
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:24628
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:16396
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:21832
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:5452
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:7308
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:26468
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:9772
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:14188
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:16208
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:20828
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:6920
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:14324
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:16200
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:20416
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:9132
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:11636
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:16920
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:22204
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:1852 -
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:1816
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:6584
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:8752
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:18808
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:25632
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:10928
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:16556
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:21212
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:6768
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:18076
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:22260
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:8864
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:22588
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:13052
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:26444
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:14468
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:20988
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:5372
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:8384
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:10972
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:23480
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:14380
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:768
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:16256
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:21244
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:6968
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:13552
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:16492
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:2472
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:9440
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:23944
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:13864
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:16280
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:21020
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"3⤵PID:4756
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:6432
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:8672
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:5740
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:13544
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:11224
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:16336
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:20676
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:6808
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:18040
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:8704
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:18316
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:23504
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:11868
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:23380
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:16376
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:20740
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"3⤵PID:5412
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:8652
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:22168
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:11840
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:22568
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:16360
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:20748
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"3⤵PID:6960
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"3⤵PID:9552
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:19032
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"3⤵PID:13880
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:2880
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"3⤵PID:16284
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"3⤵PID:20668
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2564 -
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3660 -
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:1408 -
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:1080
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:6320
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:8616
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"8⤵PID:18560
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"8⤵PID:24564
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:11644
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"8⤵PID:2744
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:16420
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:21300
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:6832
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:18132
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:23360
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:9208
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:13124
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:3276
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:20756
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:5348
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:8492
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:11148
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:19268
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:16516
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:21196
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:6760
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:18632
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:24636
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:8848
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:25672
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:13356
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:11088
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:16620
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:22576
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:744
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:6168
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:8468
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:18100
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:21772
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:11056
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:3908
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:16532
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:21188
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:6856
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:18212
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:22724
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:9100
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:18220
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:22660
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:13204
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:19052
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:13780
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:20812
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:5396
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:8696
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:23952
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:11848
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:26388
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:16352
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:20684
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:6992
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:18236
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:22732
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:9748
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:18624
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:26380
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:13960
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:20108
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:16304
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:20572
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:3904 -
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:1700
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:6508
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:8540
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:11548
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:18816
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:26452
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:16436
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:21116
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:6776
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:18204
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:22668
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:8932
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:3536
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:11856
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:12268
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:16368
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:1180
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:5356
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:7104
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:18188
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:22628
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:9780
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:25680
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:16912
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:22212
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:7000
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:13844
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:17664
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:22252
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:16232
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:20996
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:9196
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:18124
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:22740
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:7776
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:10668
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:10912
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:21340
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"3⤵PID:4776
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:6440
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:8624
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:11532
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:16468
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:21388
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:6800
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:16596
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:22276
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:8924
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:13808
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:16240
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:21180
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"3⤵PID:5404
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:9172
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:11540
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:22144
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:16460
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:21108
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"3⤵PID:6976
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:17696
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:22620
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"3⤵PID:9756
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:18616
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:25616
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"3⤵PID:16588
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"3⤵PID:10380
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4224 -
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"3⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:3572 -
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:5128
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:6364
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:8476
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"7⤵PID:22152
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:11348
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:16388
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:21132
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:6816
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:18180
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:2912
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:8712
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:4236
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:13484
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:23472
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:16508
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:3324
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:5340
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:8916
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:10904
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:16540
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:21204
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:6936
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:18092
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:22684
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:9432
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:14128
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:20112
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:16216
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:21348
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"3⤵PID:880
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:6160
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:8452
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:18084
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:22652
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:14144
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:16224
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:20440
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:6864
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:13304
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:11760
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:16248
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:21004
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:9108
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:25664
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:13276
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:16328
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:21356
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"3⤵PID:5388
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:7664
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:18712
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:5552
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:9788
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:772
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:16564
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:5324
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"3⤵PID:6904
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:18116
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:22700
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"3⤵PID:9812
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"3⤵PID:16572
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"3⤵PID:21220
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"2⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
PID:1884 -
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"3⤵PID:2628
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:5332
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:8444
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:18052
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:22236
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:11136
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:18640
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"6⤵PID:25624
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:16484
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:21156
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:6888
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:18996
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:13480
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:9544
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:25640
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:13872
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:12244
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:16264
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:20596
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"3⤵PID:5364
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:8564
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:5516
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:11596
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:16548
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:728
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"3⤵PID:6744
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:12808
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:16904
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:22220
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"3⤵PID:9180
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:22136
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"3⤵PID:11500
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:22176
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"3⤵PID:16612
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"3⤵PID:1668
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"2⤵PID:220
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"3⤵PID:6472
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:8768
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:18148
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:23488
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:12176
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"5⤵PID:812
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:16476
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:21140
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"3⤵PID:6784
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:18060
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:22244
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"3⤵PID:8856
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:22560
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"3⤵PID:12092
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"3⤵PID:16312
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"3⤵PID:21044
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"2⤵PID:5428
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"3⤵PID:8484
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:18228
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"4⤵PID:24644
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"3⤵PID:11612
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"3⤵PID:16452
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"3⤵PID:21380
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"2⤵PID:6928
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"2⤵PID:9188
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"3⤵PID:25656
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"2⤵PID:13092
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"3⤵PID:22160
-
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"2⤵PID:16136
-
-
C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\92d5c263daf6df59d9d1be4384ef164d2c4cb72631fcaf06222ebad0b1611d19_NeikiAnalytics.exe"2⤵PID:20384
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\horse handjob uncut .rar.exe
Filesize485KB
MD506cf266789b90f1f02e1b4ef2549cfe4
SHA1543900de1e725469d30419d2c0f41c67eec2662b
SHA25676144155ab5949278c44653390a77331a646d632c3d80a04eb413a2eccd168b4
SHA5127612a7693dbb25a7821b73121cd2eb35d5b1e3701495a9b986d7fc357115c19e05341f26a90235a548454d73ccd704c1f8dda263cbbe5ade82ed50d45b8cee3e
-
Filesize
146B
MD5d16b790aef00fa57808d188d32383c31
SHA1bb0ee6d89caf1a782541fadc5f0ca74d40006348
SHA256a2442f007bcbf4718d5b003ff3033d5dc65c0a2e50b4a0a65f48161596e43cfe
SHA51230b986b07179311f6b3d2698dd566cd493b7d2d26c815f29813c5ceeb51c7f3eec5bcdd78d43d095199a00c843e55998089eab26e73d25b7aeb57fa085c2213f